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■ VPN products run Itie gamut from simple encryption devices to multiprotocol 
tunnelers. One thing they share is a lack of management finesse Page 85. 

■ In our test of 1 5 VPN products, Radguard captures the Blue Ribbon by 
putting a premium on interoperability without sacrificing speed. Page 86. 

^f^lVII I HIE "What's the best way to build 
S ^^1^1 LIIVC your VPN? Find nut how 11 
■§§ vendors responded to one customer's real life VPN RFP, and weigh 
-Ip in on which deal you think is best (OocFinder: 2823). 

3: ■ Our Interactive Buyer's Guide has product specifications from 32 VPN 
S vendors and tools that help you find what you need (Docfinder 2825). 



The network portal' www.nwfusion.com 




INTEROPNET 

Bleeding edge 
booted off net 

BY TIM GREENE 



LAS VEGAS — 
When the network 
industry's masses converge on 
Las Vegas this week for 
NetWorltl+lnlerop 99. one of 
the exhibitions premiere 
attractions in previous years 

— a show network running 
on bleeding-edge technology 

— will be gone. 

In its place will be two net- 
works: InteropNet. a live pro- 
duction network built around 
See InteropNet. page 16 



Gigabit copper 
pedal to metal 

Vendors ready Gigabit Ethernet over copper cards. 



BY JEFF CARUSO 

It's been a long, 
^■^Sfil tough road for Giga- 
bit Ethernet running over 
Category 5 copper wiring But 
this week's NetWorld+Interop 
99 could very well host the 
first public demonstrations of 
the technology 

Vendors were still scram- 



NETW RLDHNTEROP 99 



O »t ! i n e 



o v e r a e c 



" Daily live broadcasts with Network Won't/columnists 
and editors (3 p.m. PDT, starting Tuesday). 

» Breaking news from the show. 

Details on our operating system showdown. 

www.nwfusion.com 




bling late last week to make 
their copper Gigabit Ethernet 
hardware work properly for 
demonstrations at the trade 
show in Lis Vegas. Early net- 
work interface cards (NIC) 
from Alteon WebSystems and 
Packet Engines are expected 
to be shown, although it's 
unlikely that any switches will 
he ready. 

Industry watchers have 
long said that developing a 
working Category 5 version of 
Gigabit Ethernet is vital to low- 
ering Gigabit Ethernet prices 
and increasing the technolo- 
gy's acceptance. Category 5 
wiring and products thai sup- 
port it are usually cheaper 
than their fiber-optic counter- 
parts, and they are more w idely 
See Copper, pane 140 



Sprint ions out service prices Cabletron smartens up switches 



BY DAVID ROHDE 

WASHINGTON, DC. — 
Sprint's crown jewel of next- 
generation service, the Inte- 
grated On-Dcmand Network 



(ION), is finally available In a 
myriad of potentially money- 
saving pricing plans. 

But there's a catch: What is 
potentially the best ION deal 
See ION, page 140 



BY 1 1 M DUFFY 

LAS VEGAS — 
Cabletron this week 
will buttress its LAN switching 
family with new software that 
lets users more easily set and 
enforce i|uality-of-scrvice (QoS) 
and security policies. 

Also at NetWorld+Interop 
99. Cabletron Will unveil high- 
er density, higher performance 
LAN switching modules to sup- 
port the QoS enhancements, 
and a new gigabit router opti- 
mized for connecting switched 



workgroups to serv er farms. 

Cablctron's firmware up- 
grade for its SmartSwitch LAN 
sw itches w ill let users classify 



and tilter traffic based on Liver 
I information. such as port and 
socket numhcrs.'Fhis ability will 
See Cabletron, page 142 




On tap from Cabletron at 
NetWorld+Interop 99... 

' New high-performance LAN modules for the SmartSwitch 
9000 (left) The modules will cost between $7,200 and 
$21 .000 and will ship in August. 

i SmartSwitch 9000 Layer 4 quality-of-service and security 
f itmware. which costs $250 and is available now 

' A Gigabit Ethernet woikgroup switch called the SmartSwitch 
Router 2100, priced at $1,250 per port It will ship in June 




XEROX SOLUTION 
AT 40 PAGES PER MINUTE. THE 
XEROX DOCUPRINT N40 NETWORK 
PRINTER IS 25% FASTER THAN THE 
FASTEST HP LASERJET PRINTER, 
AT A VERY COMPETITIVE PRICE. 
WE CALL THAT BRILLIANT. 

KEEP THE CONVERSATION GOING. 
SHARE THE KNOWLEDGE. 

TlIEW(fetMkNT COMPANY 

XEROX 

Free Product info enter NWInfoXpress #50 online @ www.networkworld.com/infoxpress 



INS. 

Now with more network 
stars than anyone. 
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It's official. 

INS was just named the top high tech consulting 
firm, according to Yankee Group and Upside 
Magazine, who chose us over 140 other companies. 

All ot which confirms what network professionals 
have known for some time— that INS is the leading 
provider of network consulting and software solutions. 

Our 1200 engineers and consultants have 
created many of today's most powerful and innovative 
networks. Each one accesses that experience through 
INS KnowledgeNet. our industry-leading database of 



over 10.000 networking solutions, and fully documents 
each project to make our clients as self-sufficient as 
possible. 

That's why most of the Fortune 100 trust INS 
with their networks, and why 9 out of 10 clients come 
back to us with additional work. 

For more information 
on how our network stars 
can help you, please call 
888-INS-8100. Orvisit our 
website at www.ins.com. 
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The more things 
change . . ■ After 1 1 
years at Network 
World, Features 
Editor Paul Des- 
mond is leaving to 
seek new challenges. He looks 
back at networking over the past 
decade and says things haven't 
really changed all that much: "Yes, 
technology is rapidly improving, 
but many of the fundamental 
issues, problems and technologies 
remain the same." OocFinder 2845 

Layer 3 switches. Which switch 
would you recommend for a core 
net? The question left a Fusion user 
perplexed by the many choices out 
there. Readers with Layer 3 experi- 
ence rushed to give their advice. 
See what they recommend — and 
add your own comments. 
DocFinder: 2846 

E-commerce. Want to set up shop 
online? Our E-commerce section 
provides everything from the latest 
electronic commerce news to user 
stories OocFinder. 1707 



Keeping Current. Yes, Virginia, there 
are monopolies. Fred McClimans 
looks at all the 
AT&T/MediaOne/ 
Microsoft maneu- 
vers and predicts 
that the winners in 
the next big services 
war will be the same companies that 
won the last battle. DocFinder: 2844 



McClimans 



Going to N+l? We'll be experiment- 
ing with some live conferencing at 
the show. At 3 p.m., Tuesday 
through Thursday, Senior Online 
Reporter Sandra Gittlen will lead a 
live CU-SeeMe broadcast featuring 
the latest news and comments 
from Network World columnists 
and editors, including Mark Gibbs, 
Dave Kearns and Joel Snyder. If 
you want to watch, or just say 
hello, stop by booth 2630. 
OocFinder: 2840 



How to get onto 
Network World Fusion 

Click on Register on the home page 
and follow the instructions. 
Subscribers, keep your NWF number 
— highlighted on the front cover's 
mailing label — handy dunng 
registration Nonsubscribers 

must fill out an online . «— . 

registration form. | 
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STAFF: See the masthead on page 12 tor more 
contact information REPRINTS: 171 71 560-2001 
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Virtual private networks products run 
the gamut from simple encryption 
devices to multiprotocol tunnelers. 
One thing they share is a lack of 
management finesse. Page 85. 

In our test of 15 VPN products Radguard 
captures the Blue Ribbon by putting a 
premium on interoperability without 
sacrificing speed. 



A NEW INDUSTRY BENCHMARK: 

3Com, HP and Foundry are the price/performance kings in the 
first round of testing under the new Network World/Tolly Group 
SwitchMetric program. Page 97. 

CACHE CACHET: Web caching appliances can 
help reduce Internet traffic, but don't expect them to cure all 
your bandwidth woes. Page 101. 



Eleven vendors respond to a reader's VPN RFP. Add 
your thoughts on which is offering the best deal. 

DocFinder 2823. 

Our Interactive Buyer's Guide has product specifications 
from 32 VPN vendors and tools that help you find what 
you need. DocFinder 2825. 

Chat with Network World Test Alliance member Joel 
Snyder, who'll be online all week fielding questions and 
offering VPN commentary, DocFinder 2822. 

Check out case studies and tips from new VPN adopters to 
make your implementation easier. DocFinder 2822. 

COOL TOOLS: Vega Technologies' Buddy System 
lets two users work on the same client Page 104. 

FACE-OFF: Extreme Networks CEO Gordon Stitt argues 
that you're better off letting a specialist fulfill your LAN equip- 
ment needs, while 3Com Vice President Andy Gottlieb says it 
takes a full-spectrum provider to cover all the bases. Page 83. 



News 



INT 



A MUTC RPR J 

NEWS BRIEFS. MAY 10, 1999 



Lockheed Martin flies into 
broadband business 

Lockheed Martin last week announced a 
partnership with TOW and Telecom Italia to 
develop a $3.6 billion satellite company 
called Astrolink that will provide global, 
broadband multimedia and Internet access 
for business and consumer use. Lockheed 
Martin says its Global Telecommunications 
Group will invest $400 million in the venture. 
Telespazio, part of Telecom Italia, and TOW 
will each invest $250 million. Astrolink plans 
to launch the first of nine satellites in 2002 
and hopes to provide broadband data com- 
munications services to Europe, North 
America and South America by 2003. 

AT&T digests IBM Global Network 

The venerable IBM Global Network is now- 
called AT&T Global Network Services — at 
least in the US. AT&T last week completed 
its acquisition of the IBM net domestically, 
with customer contracts and 3.000 employ- 
ees moving over to AT&T. Significantly, AT&T 
then put the entire business in its rapidly 
growing AT&T Solutions division, signaling 
the company's determination to continue to 
push managed networks and outsourcing 
along with its new network assets Closing 
the IBM Global Network deal in other parts 
of the world depends on regulatory approval 
and other matlers.AT&T officials say. 

Kennard wants E-rate funding 

Federal Communications Commission 
Chairman William Kennard last week pushed 
for full funding of the E-rate program to pro- 
vide network-services subsidies to schools 
and libraries. That means the program would 
get $2.25 billion over the next school year — 
the maximum allowed by law — compared 
with about $1.3 bil- 
lion for the current 
school year. E-rate 
ran out of money 
this past year, mean- 
ing it could provide 
funding for carrier 
services but not 
LAN and WAN 
equipment at 
schools in relatively 
wealthy districts. 
Kennard is expected 
to gel a light over 

his proposal, as many lawmakers have criti- 
cized E-rate for its administrative complexity, 
lawmakers also have attacked E-rate for fund- 
ing many regular phone services in addition 
to Net access, and because it has resulted in 
additional charges on all phone bills. 

Informix gets a new boss 

Bob Finocchio last week said he will step 
down as president and CEO of database ven- 
dor Informix but will continue in his role as 




FCC's Kennard seeks 
more funds for E-rate. 



chairman of the company's board. Re- 
placing Finocchio will be Jean-Yves Dex- 
micr, currently executive vice president of 
worldwide field operations and previously 
Informix's chief financial officer. The transi- 
tion, which includes Dexmier being 
appointed to the company's hoard of direc- 
tors, will be effective July 16. 

Dick Tracy's futuristic technology 
becomes a reality 

Faced with battling the likes of Wrathful 
Ralph and Piggy Bank, Dick Tracy could 
always phone for help or get evidence via his 




trusty watch. The voice- and video-enabled 
watch, first introduced in the comic strip in 
1916, has been only a dream — until now. 
Researchers at Bell Labs/Lucent have mas- 
tered the technology that could make a Dick 
Tracy watch possible. They have created a 
minuscule. 100-micron microphone on a 
chip, which could lead to the voice and video 
recognition Tracy relied on. 

MCl/Nextel deal no more 

It's official: MCI WorldCom will not buy 
Nextcl Communications, the Mclean, Va., 
wireless service provider. MCI WorldCom 
did not offer any more detail other than to 
say in a printed statement: "MCI WorldCom 
has determined not to pursue a bid for 
Nextcl at this time." But rumor has it that the 
two companies could not come to an agree- 
ment on a price. MCI WorldCom never 
acknowledged it was in talks with Nextcl 
until last week when MCI WorldCom killed 
the potential deal. 

Your digital John Hancock 

Your written signature will stand up in a 
court of law; but will your electronic digital 
signature!' LSSt week, lawmakers took the 
first step to make digital signatures legal and 
binding by introducing The Electronic 
Signatures in Global and National Commerce 
Act. dubbed the ' E-Sign" bill. Introduced by 
Reps. Tom Bliley (R-Va.).Tom Davis fR-Va ), 
Billy Tauzin CR-La.) and Mike Oxley (R-Ohio). 
the legislation provides for the acceptance of 
electronic signatures for interstate com- 
merce and the securities industries. The bill 
defines technological neutrality and says pri- 
vate parties should be able to pick the forms 
of electronic signatures that they prefer. 



Qwest wins voice, data 
contract with Walgreens 



Frame relay, circuit-switched mice services 
represent IP carrier 's topical entry into enteiprises. 



BY DAVID ROHDE 

DEERFIELD. ILL. — If 
Qwest isn't the first carrier 
you think of when it comes to 
frame relay and old-fashioned 
circuit-switched voice, it may 
be time to reassess your 
assumptions. 

The new national carrier 
made its most recent sale of 
surprisingly traditional net- 
work services last week when 
it bagged Walgreens, the 
nation's largest drugstore 
chain, in a $9 million contract. 
The principal loser in the deal: 
MCI WorldCom. 

In the past, Walgreens has 
split its data-network traffic at 
least three ways — among 
AT&T and MCI WorldCom 
frame relay networks, and a 
separate satellite network. 
Now Qwest will provide 
frame relay connections to 
465 stores, replacing the MCI 
portion of the network and 
extending frame relay to some 
new sites, according to Pete 
Szabo. a Qw r est senior applica- 
tions engineer, ilic AT&T and 
satellite data nets will remain 
in place, he says. Walgreens 
officials did not comment, bin 
an MCI WorldCom spokesman 
confirmed the loss. 

On the voice side, Qwest 
scored even bigger. The carrier 
will provide Qwest VNS — a 
traditional circuit-switched vir- 
tual private network (VPN) in 
wilich intracompany calls trav- 
el over a national net — to all 
2.700 of Walgreens' stores, dis- 
tribution centers, district 
offices and affiliated locations. 

The Qwest frame relay net- 
work will carry point-of-sale 
applications, such as credit 
card verification, plus other 
traffic. The frame network 
itself will be quite conv ention- 
al, with groups of 40 stores 
each using basic 56K bit/sec 
frame relay ports connecting 
to a 512K bit/sec port at one 
of Walgreens' data centers. 

Qwest officials say they 
were able to offer Walgreens 
an especially attractive deal 
because they combined voice 



and data traffic on a single 
contract. Without giving exact 
numbers, Qwest confirmed 
the price Walgreens will 
enjoy is substantially below 
Qwest's official $190 per 
month 56K frame relay price. 
Even the $190 figure under- 
cuts frame relay prices from 
AT&T, MCI WorldCom and 
Sprint (ATR Dec. 14, 1998, 
page 1). 



Qwest on a roll 

Besides winning Walgreens' 
business, the new national 
long-distance carrier has 
won over the following large 
organizations: 

• ADP 

• Boeing 

• Cox Communications 



1 Delta Airlines 
1 Ford 



• Microsoft 

• REMAX 

• U.S. Department of Treasury 

Publicly. Qwest has pro- 
moted its broadband IP capa 
bilities, including a v oice-ov er- 
IP service. And Qwest officials 
say Walgreens and other new 
Qwest customers like the 
option of ev entually migrating 
to these IP services, even 
though the services are not 
yet fully defined. 

Yet behind the scenes 
Qwest has carefully laid a plan 
to capture initial enterprise 
network business using more 
traditional technologies. I 1 1 1 
Joe Nacchio has acknovvl- 
edged many large enterprise 
networks arc likely to migrate 
slowly to full-featured IP VPNs, 
and he has called Qwest's tra- 
ditional telecom offers a 
process of "feeding the quack- 
ing ducks." 

Mack Greene, Qwest's vice 
president of voice and data 
product management, says 
more such deals are in the 
pipeline. "I'm carrying a big 
bag of duck feed," he quips. LI 
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MISSION 



Find those pesky 
system errors before 



they become nasty 



business errors. 





Done deal / The head of manufacturing is gearing up for 
the year's biggest order. Meanwhile, a sudden problem 
is threatening to bring down the ERP system and grind 
production to a halt. Is it a sluggish app server? A faulty 
network? A corrupted database? Tivoli IT management 
software automatically identifies the exact cause of 
the problem and fixes it. The order gets filled. Service 
levels are kept high. Business keeps running. And the 
biggest customer remains a customer. All because IT 
insisted on an integrated management solution from 
Tivoli Systems Inc., an IBM company, www.tlvoli.com 
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Novell chomps on 64 bits 



BY ROBIN 

SCHREIER HOHMAN 

PROVO, UTAH — Key 
pieces of Novell's 64-bit strat- 
egy are beginning to emerge, 
with the company planning 
to break off parts of NetWare 
for use on network appliances 
that don't require NetWare. 

Novell will ship the pieces 
of NetWare that provide 
caching, directory and stor- 
age services for 64-bit Merced 
chips before the company 
ships a full-blown 64-bit oper- 
ating system. The services 
will run on servers and appli- 
ances that are part of OEM 
deals, such as the one Novell 
has with Compaq and Dell 
for 32-bit Internet Caching 
Services. 

With its 64-bit strategy, 
Novell will be attacking Micro- 
soft on two fronts, in the net- 
work operating system and 
network services markets, 
attracting customers without 
necessarily forcing them to 
choose between NT and 
NetWare. The firm has said it 
will develop tools to help 
users run Microsoft's Active- 
Directory alongside Novell 
Directory Services. 

The 64-bit products are tar- 
geted for Intel's Merced 



processor, which is expected 
to ship in mid-2000. Novell is 
hoping to ship the software 
chunks at the same time. 
Novell isn't saying when — or 
if — it will port NetWare ser- 
vices to run on Compaq's 64- 
bit Alpha processor. 

Novell is taking out network 
services and putting them on 
appliances, in part to help 
identify NetWare as a Web 
operating system. A Web oper- 
ating system, according to the 



WebOS Web site at the 
University of California, Berk- 
eley, provides a common set of 
operating system services to 
wide-area applications. Those 
services include naming, 
authentication, security and 
resource management. 

NetWare 5 still alive 

Hoping to drive deeper into 
Web territory, Novell will 
release several enhancements 
to NetWare 5.0 that support 



Web-based communication 
The effort is dubbed Cobra, 
and among other things, it will 
support HTTP as a protocol. 
HTTP is the communications 
protocol used to process 
Internet traffic. 

Currently, the NetWare Core 
Protocol (NCP) in Version 5.0 
runs over IP or IPX, but not 
HTTP Novell will also publish 
the communication APIs to 
give developers access to 
the NCP layers for fine-tuning 
NetWare. The company has 
no plans to publish the secur- 
ity APIs. 

Support for HTTP will also 
enable NetWare to work with 
Office 2000 and Windows NT. 
Novell hasn't announced ship- 
ping dates yet for any of the 
pieces of Cobra. 

The next full upgrade of 
NetWare, code-named 6 Pack, 
will let services run across 
multiple processors, says Brian 
Faustyn, director of product 
marketing for NetWare. Right 
now, the NetWare 5.0 kernel 
can take advantage of multiple 
processors, but services such 
as ICS, NDS and NetWare stor- 
age can't. 

A NetWare 6 memory fix 

The 6 Pack upgrade will 
also be able to scale better, 
supporting more than 4G 
bytes of memory on the serv- 
er. In addition, 6 Pack will sup- 
port quality of service for 



applications, Faustyn says. 
Novell hasn't yet set a date for 
release. 

Like the 64-bit services, the 
components of 6 Pack will be 
released in parts. The strategy- 
comes from a mandate from 
Eric Schmidt when he took 
over as CEO, Faustyn says. 
Schmidt's idea is to develop 
smaller pieces of code and to 
ship them faster than Novell 
could ship a fully grown oper- 
ating system. 

The strategy is designed to 
also help Novell attract a 
base of non-NetWare cus- 
tomers. "Novell has to create 
products that are sort of out- 
side the traditional NetWare 
box," says Jamie Lewis, presi- 
dent of The Burton Group. 
Lewis says that in order for 
Novell to succeed, the compa- 
ny also has to release the tools 
that make it easier to run NT 
and NetWare together. One 
key tool, he says, would be a 
utility to help Microsoft's 
Active Directory run along- 
side NDS, because Microsoft 
seems to be designing Active 
Directory to be specific to 
Microsoft products. 

Novell's current strategy — 
to make NetWare more com- 
patible — seems to be work- 
ing, Faustyn says. NetWare 
5.0 was the first version 
to support IP and IPX, 
Novell's proprietary transmis- 
sion protocol. 3 



64-bit NetWare 

A sample implementation of a 64-bit NetWare network: 



I 



O A 64-bit version of Novell Directory 
Services (NDS) will run stand-alone 
on a special Merced box. 



Storage subsystem 



64-hit server 
running NDS 



■ 



O Novell will also decouple the 

services that manage storage. ^ g| 




O Novell this summer 
will ship Internet 
Caching Services on 
32-bit servers from 
Dell and Compaq, and 
the company will do 
the same for servers 
running 64-bit Merced 
chips. 



Microsoft brews microbrowser 



BY JOHN COX 

REDMOND, WASH. — Micro- 
soft has just begun trials of a 
portable microbrowser that lets 
wireless smartphones access 
parts of the Web. 

The unnamed product will 
ship to phone makers by June, 
giving Microsoft a badly needed 
presence in the burgeoning 
wireless handset market. The 
company faces uncharacteristi- 
cally stiff competition from 
other software vendors, such as 
Symbian, that also want to sell 
software to connect millions of 
wireless phones to Internet- 
based services. 

"The microbrowser is an 
attempt to give sniartphone 
users a Microsoft experience in 
accessing the Web," says Jill 
House, a research analyst with 



International Data Corp. in 
Framingham, Mass. "Windows 
CE is not ready yet for this type 
of market: CE is still too bulky 
and lacks real-time features.The 
microbrowser is an interim way 
for Microsoft to get into this 
fast-growing market." 

The next generation of wire- 
less phones is being equipped 
with microprocessors, tiny 
screens, some extra memory, 
operating system software.TCP/ 
IP software and HTML Web 
browsers. Meanwhile, telcos are 
prepping an array of Internet- 
based, general and industry- 
specific information services, 
including access to corporate 
groupware and e-mail servers. 

There are rival micro- 
browsers. Symbian licenses one 
from STNC, Ltd., a software 
vendor based in the U.K. 



Phone.com, formerly Unwired 
Planet, of Redwood Shores, 
Calif., likewise has a micro- 
browser, based on the Wireless 
Application Protocol Forum 
specification. Microsoft partner 
and wireless phone maker 
Qualcomm currently uses this 
browser but will aLso use the 
Microsoft product when it 
becomes available. 

The Microsoft software will 
support the network interface, 
cache data locally and manage 
the display and input. The soft- 
ware will include an HTML ren- 
derer and eventually will sup- 
port Extensible Markup Lan- 
guage, which is fast becoming 
the standard for representing 
data on Web pages. 

The Microsoft browser will 
also include a telephony API to 
blend the browser functions 



with the core cellular phone 
capabilities, says Phil Holden, 
group product manager for 
Microsoft's productivity appli- 
ances division. 

In most cases, the micro- 
browsers won't be used for PC- 
like Web browsing because 



many of the handset screens 
display only a few lines of text. 
"It's fine for certain types of 
things, like getting a short mes- 
sage or stock quotes or check- 
ing an airline reservation," says 
Jeff Belk, vice president of mar- 
keting for Qualcomm. A 



Microsoft's microbrowser 

Microsoft's portable HTML microbrowser is now in trials and 
will ship to handset manufacturers by June. The software, for 
accessing specialized Web information from various kinds of 
wireless smartphones, will give Microsoft 
a presence in a fast-growing market. 
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Predict The Future, 

And Ydu Can 
Change The World. 

With NEUEENT5, 
Ydu Can □□ Both. 





Introducing software that can emulate a human brain. 

It's true. Neugents" think like a human — 
only faster. 

Neugents compute not in thousandths of a 
second, but millionths. Without emotion, subjectivity, 
or bias. 

Neugents can analyze, make decisions, take 
action. They can process massive amounts of chaotic 
data and instantly identify complex patterns and rela- 
tionships. Figuring out why things happen, and more 
importantly, predict what will happen next. 

Neugents can learn. Using a unique self-learning 
algorithm, Neugents get smarter every second, every 
hour, every day. 

The secret is Neural Network Technology. 
Computer Associates has taken this powerful technology 
and turned it into a patented application that goes far 
beyond traditional forecasting methods and rules- 
based applications. 

Neugents can tell you what your sales are going to 
be next week, next month, or next year. They can tell 
you before your next product fails — and why. And for 
enterprise management, Neugents can do everything 
from warn you before a server goes down — or tell you 
when and where your next security breach will occur. 

With virtually every aspect of your business, 
Neugents can accurately and consistently predict the 
future. 

And when you can predict the future, you can not 
only change the future, you can change the world. 
Call 1-877-Neugents for more information. 



NEUEENT5™ Software That Can Think: 
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(aOMPUTER 

Associates 

Software superior by design. 



Free Product info enter NWInfoXpress #31 online @ www.networtmorld.com/infoxpress 
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Start-up Sirocco to feed fiber networks 

From Sahara to Sirocco, entrepreneur Jonathan Reeves is at it again with an edge device start-up. 



BY TIM GREENE 

WAUINGFORD, CONN. — 
Jonathan Reeves likes to live 
life on the edge. 

First he was at the edge 
of public ATM networks, and 
now he is at the edge of 
dense wave-division multi- 
plexed networks running on 
optical fiber. 

Reeves founded Sahara 
Networks in 1995 to build 
access concentrators that 
took voice, video and data 
traffic from customer sites 
and dropped the traffic on- 
to public ATM networks. 
Cascade Communications 
bought out Reeves for S210 
million 18 months after 
Sahara was born. 

Now with his new venture. 
Sirocco Systems, Reeves plans 
to make a box that takes in 
the same kind of customer 
traffic and drops it directly 
onto service providers' fiber- 
optic backbones. 

Sirocco's boxes will serve 
as gateways between cus- 
tomers' existing gear and 
the high-bandwidth optical 
networks that carriers will 
use to provide a new breed of 
services. 

Reeves says his change in 
focus comes down to just fol- 
lowing advances in technology; 
"The core network has under- 
gone dramatic change," he 
says, "It was a frame relay core, 
then an ATM core; now it is an 
optical core." 

In returning to the edge. 
Reeves brings along Tom Shay, 
who helped him start Sahara. 
Sirocco's headquarters, staffed 
by 20 people, is just a few 
miles from Sahara's Walling- 
ford, Conn., base. 

Even the names are linked. 
SirOCCO is a hot wind that 
blows through the Sahara 
Desert. Sirocco and Sahara are 
also the names of cars — 
Sirocco is a Volkswagen and 
Sahara is a Jeep. Founded in 
January, the company just 
received S9 million in venture 
funding from Bessemer Ven- 
ture Partners and Greylock. 

Sirocco's goal is to produce 
access concentrators that can 
switch legacy traffic to what- 
ever protocol is being used on 
the fiber, whether it's SONET, 



ATM, IP or some combination. 

The trouble with optical 
networks is that they can 
speed bits along a single color 
of light, but they lack the intel- 
ligence to sort out traffic types. 

"Optical networks are pro- 



tocol-dumb." Reeves says. "At 
the edge, you need a dual per- 
sonality: know optics, but also 
electronics to handle existing 
protocols." 

The electronic half of 
Sirocco concentrators will 



PROFILE: SIROCCO 
SYSTEMS 




Based: Wallingford. Conn 

Founded: January 1999 Founder Jonathan km 

Products: Optical access concentrators (under development) 

Employees: 20 

Funding: $9 million from Bessemer Venture Partners and Greylock 

Competitors: Lucent. Sycamore 

Fun fact: Founder Jonathan Reeves' former start-up was called Sahara, 
and Sirocco is a hot wind that blows through the Sahara. 



have familiar network inter- 
faces from T-l to OC-48, 
he says. Those ports will con- 
nect to customer network 
gear. Ports to the network ser- 
vice provider will be optical 
and feed multiple wave- 
lengths of light onto individ- 
ual fibers. 

The traffic coming into the 
Sirocco box will be sorted and 
sent along the appropriate 
wavelength into the optical 
network. 

Each uplink wavelength 
will represent a different desti- 
nation, such as a long-distance 
network, a public IP or private 
network. 

Initially, the Sirocco boxes 
would be used between ser- 
vice provider networks. An 
ISP buying long-haul trunk- 
ing bandwidth on another car- 



rier's fiber network might use- 
such a device to transfer traf- 
fic onto the long-haul carrier's 
network. Sirocco would pro- 
vide what Reeves calls an opti- 
cal User-Network Interface 
(UNI). 

That interface could be 
SONET or something new, such 
as ATM or IP directly on the 
fiber — what Reeves calls 
packet over photon. Rather 
than using SONET for features 
such as performance, monitor- 
ing and failure notification, the 
features would be handled by 
enhanced packet technology, 
he says. 

Later, as optical networks 
become more common and 
bandwidth prices drop, Sirocco 
concentrators will sit at corpo- 
rate sites and act as the optical 
UNI between enterprises and 
carriers. Reeves predicts. 

A product built to phone- 
company standards will be 
ready sometime next year, he 
says. 

Sirocco: (203) 269-9919 



IBM to roll out directory of directories 



BY MARC SONG1NI 

LAS VEGAS — IBM this 
week is expected to unveil 
software for building 
massive directories that 
can store and serve up 
the data needed to sup- 
port security and policy- 
management schemes across 
multivcndor networks. 

The company's unnamed 
offering, which IBM plans to an- 
nounce at NetWorld+Interop 
99, will serve as a director}' of 
directories, presenting a con- 
solidated view of information 
stored in assorted directories 
across a network. The com- 
pany's mctadircctory product 
will use the Lightweight 
Directory Access Protocol to 
tap into information reposito- 
ries, such as Novell Directory 
Services, and directories associ- 
ated with specific applications, 
such xs Lotus Domino. 

Directories are considered 
to be crucial components of 
companies' network manage- 
ment and security strategies. 
Network executives can store 
everything from end-user pro- 
files to digital certificates to 
phone numbers in directories 



and then can use that informa- 
tion when defining qualiry-of- 
service parameters and net- 
work access rights. A meta- 
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directory can be used to 
update the individual directo- 
ries scattered across a network 
when data changes and to syn- 
chronize data across separate 
directories. 

Metadirectorics are needed 
by large enterprises in particu- 
lar because such companies 
each average more than 100 
separate directories, says Jeff 
Jaffe, general manager of the 
IBM SecureWay division, for- 
merly called the eNerworking 
Division. Consolidating data 
from separate directories can 
make it easier to find and man- 
age network resources, he says. 

IBM Global Services already 
works with users to design 
customized metadirectorics. 
Customers will be able to con- 
figure the new directory prod- 
uct themselves. 

Jaffe says IBM's mctadircc- 
tory stands apart from others 



because of the scalability and 
professional services the com- 
pany offers. 

IBM 's software runs atop the 
company's DB2 database, 
which runs on platforms 
ranging from Windows NT 
servers to S/390 main- 
frames and can store up to 
terabytes of data. The 
mctadircctory takes advantage 
of DB2's join engine to make 
connections between data in 
different directories and to 
consolidate such data. 

IBM's mctadircctory could 



11 



prove useful to customers 
heavily involved in electronic 
commerce, says Michael Mar- 
quardt president at Internet 
Operations Center, a Detroit 
ISP and outsourcing firm that 
caters to the car industry. 
Such an information repository 
could be key to supporting net- 
work security policies, he says. 

The technology might fit 
well in Marquardt's network, 
which contains separate direc- 
tories for AIX, Solaris and other 
machines. 

"The whole directory puzzle- 
is a big deal," he says. "People 
maintain a variety of directo- 
ries, and the Holy Grail is to 
have them integrated." 

Pricing for the product was 
not available. A 



Showdown lowdown 

When: Tuesday. May 1 1 . 1 0 30 to noon 

Where: NetWorld+Interop 99, Las 
Vegas Convention Center. Room N246 

Participants: Tanya van Dam, group 
product manager for Windows NT 
Server. Microsoft Drew Major, chief 
scientist, Ncvel Richard Green, vice 
president of the Solaris product line. 
Sun Microsystems. Tamar Newberger, director of server product marketing, 
The Santa Cruz Operation. Erik Troan, director of engineering, Red Hat Software 

Panel members: Christine Bums, Test Alliance director, Network World, 
Nick Petreley, editorial director, Linux World 

Moderator: John Gallant editor in chief. Network World 
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AT&T co-opts broadband cable opposition 

Industry wonders whether telecom giant is shafting DSL, other integrated-access projects. 



BY DAVID ROHDE 
AND JOHN FONTANA 

NEW YORK — AT&T's 
broadband cable dream grew 
even bigger last week, as the 
carrier's chairman, C. Michael 
Armstrong, worked some deft 
maneuvers to shove aside 
potential bidders for cable TV 
player MediaOne. 

The moves — which con- 
verted potential enemies Com- 
cast and Microsoft into allies of 
AT&T in its S 58 billion Media- 
One bid — has prompted not 



to other so-called "last-mile" 
technologies that are further 
along the voice/data conver- 
gence path than cable. Most 
cable system operators are 
rushing to convert their exist- 
ing coaxial-cable systems to a 
hybrid of fiber optics and 
coaxial cable, but the switch- 
ing equipment required for 
two-way telephony and Inter- 
net over cable is largely 
unproven. 

"We still favor [digital sub- 
scriber line] because of the 
security and guaranteed band- 



"And AT&T is not going to 
make a huge marketing push 
on INC until at least next 
year," Pierce says. 

Behind last week's moves 
were some parochial cable- 
industry concerns. Comcast 
agreed to forfeit its MediaOne 
bid as long as AT&T gave it 
some former TCI properties 
adjacent to existing Comcast 
systems — a concept cable 
officials call clustering, which 
is considered desirable for 
regional marketing. That 
demand cost Armstrong some 



Whole lotta wheeling and dealing 



AT&Ts cable maneuvering is designed obtain the maximum amount of cable lines just short of the 
quantity where regulators would likely kill its purchase of MediaOne. AT&T will also receive 
capital in exchange for new commitments to Microsoft: 

AT&T 

/ = • Clears a path to be the sole bidder for MediaOne 's five million cable subscribers. AT&T will now have 
- 16 million cable subscribers, after giving up some to Comcast. 

• Gains Comcast's agreement to help manage some additional cable facilities that Comcast is buying. 

Comcast 

• Gets two million of AT&T's cable subscribers (from the TCI acquisition! in exchange for agreeing 
to withdraw its bid for MediaOne. 

• Agrees to market local telephony-over-cable under the AT&T brand name. 
MediaOne 

M G dictQng " Shareholders get S58 billion for the sale to AT&T, pending regulatory and shareholder approvals. 
~ ~ ~ • Avoids a protracted bidding war in a period of rapidly fluctuating stock prices. 
Microsoft 

• Buys $5 billion in specially issued AT&T stock. 

• Gains AT&T's agreement to increase the use of Windows CE in advanced set-top devices. 



QcOMCABT 



only awe for Armstrong's deal- 
making, but also concern that 
AT&T could be distracted 
from developing other broad- 
band technologies for which 
enterprise network users are 
clamoring. 

Comcast last week with- 
drew its $50 billion bid for 
MediaOne, clearing the path 
for AT&T to pursue Media- 
One unopposed. And Micro- 
soft, which sees a huge 
opportunity for its Windows 
CE operating system with 
potentially millions of broad- 
band cable residential users, 
decided the best way to get 
there was through AT&T 
rather than by buying its own 
cable company. 

But analysts say they are 
getting nervous that AT&T — 
which already owns the for- 
mer Tele-Communications, 
Inc. (TCI) cable systems — 
isn't paying enough attention 



width," says Lisa Pierce, a tele- 
com analyst with Ciga In- 
formation Group. "Although 
there's possible contention in 
DSL, it isn't shared across 500 
homes the way hybrid fiber/ 
coax is." 

Pierce credits MCI World- 
Com and Sprint with making 
bolder DSL moves than AT&T. 
AT&T only announced DSL 
trials late last month. And 
AT&T's Integrated Network 
Connection 0NC), a service 
for business sites that concen- 
trates multiple compressed 
voice and data streams over 
an ATM premises device 
attached to a T-l access line, 
isn't moving very fast, she- 
says. 

AT&T officials confirmed 
to Nettvork World last week 
that INC beta trials will now 
last beyond the originally 
announced first half of the 
year into the third quarter. 



prize properties, including the 
former TCI system in Wash- 
ington, D.C. 

For his part, Armstrong says 
giving up two million sub- 
scribers to Comcast would 
help assuage regulators who 
must approve the deal. 

Analysts say that's just a 
measure of political insurance 
because Federal Communi- 
cations Commission Chair- 
man William Kennard has 
already extolled the combina- 
tion of AT&T and cable prop- 
erties as a good deal for resi- 
dential customers. 

"AT&T has convinced the 
FCC that its acquisition of 
more and more cable com- 
panies is the last and best 
hope for meaningful res- 
idential local competition 
in the U.S.," says Alan Pearce. 
president of Information Age 
Economics, a Washington. 
DC, consulting firm. 



America Online and some 
state ISP trade associations 
are likely to oppose the 
MediaOne deal as they did 
the TCI deal. But the na- 
tion's largest ISP associa- 
tion — the Commercial 
Internet Exchange (CLX) — 
says it's unlikely to fight. CLX 
members are far more con- 
cerned about getting access to 
DSI.-conditioned regional Bell 
operating company access 
lines than AT&T's cable 
moves, says CIX President 
Barbara Dooley. 

As part of those moves, 
AT&T will increase the al- 
ready 5 million digital set-top 
boxes they have agreed to 
deploy with Microsoft's Win- 
dows CE-based operating sys- 
tem by between 2.5 million 
and 5 million. The boxes will 
be used to deliver video, data 
and Internet telephony to 
consumers "TV sets. 

The deal, which is not 
exclusive, would give Micro- 
soft roughly 70% of AT&T's 
cable customers. The two will 
deploy the technology in 
three "showcase" cities in 
order to prove the concept 
and demonstrate interoper- 
ability between Microsoft's 
and other technology, most 
notably Java, which AT&T has 
also licensed from Sun. 

Although partnerships of 
this magnitude have failed to 
generate results in the past, 
most notably Microsoft-MCI's 
and Lotus-AT&T's deals to 
host e-mail, Dwight Davis, an 
analyst with Summit Strategy, 
says this deal is different. "It's 
a newer and less proven tech- 
nology, but one that telcos 
and cable companies have a 
vested interest in seeing suc- 
ceed," he says. 

And while the initial focus 
is on the consumer, enterprise 
users may see spin-offs. 

"This is not a pure CE set- 
top box deal by any means," 
Davis says. "Clearly, part of 
the Microsoft strategy is to 
form this relationship with 
a big carrier that may be- 
come an application service 
provider. Microsoft will be 
well positioned to supply 
hosted applications and the 
infrastructure [the applica- 
tions] sit on." B 
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Is your e-business 
walking a tightrope? 




The power of the Pentium III processor. 

A safety net for your network in the Internet economy. 




Pentium... 



The more business you do through the Internet, 
the more your network is exposed to viruses, 
unauthorized access, and potentially overwhelm- 
ing traffic loads. Your safety net? The Inter 
Pentium* III processor. It has the power to run sophisticated 
compression, encryption and anti-virus software at the PC level 
without interrupting your users. That helps guard against security 



breaches that can come in over the Net while reducing stress on the 
network as a whole. And to add an even higher level of protection, 
each processor has a unique serial number to identify PCs in your 
network and help protect your vital assets. To learn more on the 
Pentium III processor, visit us on the Web, where 
you'll also find information on Intel ' products 



intel 



and the year 2000." ►www.intel.com/IT The Computer inside. ■ 



Copyrighted i 



News 



Mgmt. tools will blanket N+l 



Management Bonanza 



BY JEFF CARUSO 

IAS VEGAS — Management 

software of all varieties will 
premiere at this week's 
NetWorltl+Interop 99 trade- 
show. 

Mueh of the activity will 
eenter on products for applica- 
tion and systems management. 



ing software. "The issue is how 
much time you have to spend 
with it," McConnell says. 

Here is a sampling of 
planned announcements: 

• Savant will take the 
wraps off of a performance 
management product called 
QSensor. The software col- 
lects response-time informa- 
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network performance report- 
ing and protocol analysis. 

Sifting through all the new 
products may he difficult, says 
John McConnell, president of 
McConnell Associates in Bould- 
er, Colo. But network managers 
might start by looking at how- 
much time the software will 
save them vs. how much time 
they will have to spend writing 
management rules or configur- 



tion from software probes on 
servers, clients and network 
segments. Over time, it estab- 
lishes a baseline of normal 
activity If response time 
greatly deviates from the 
norm, QSensor alerts network 
managers. 

• NLKi Software will intro- 
duce a Remote Monitoring 
(RMON) 2 agent that is pro- 
grammable. Network managers 



will be able to write scripts 
in Perl and download them for 
the HaRMONi agent to exe- 
cute. This way. the agent can 
collect the specific informa- 
tion the script requested, such 
as the applications running on 
a server or the server's CPU 
and disk usage. 

• Compuwarc will unveil 
EcoScope 4.0, a tool for 
troubleshooting and monitor- 
ing the performance of net- 
works. EcoScope has been 
completely rewritten to scale 
up to larger networks, going 
from a maximum of 22,000 
nodes to as many as 100,000. 
Compuware says. Software 
probes now feed data to probe 
managers, which filter the data 
and present various levels of 
detail. The new version also 
uses Microsoft SQL Server to 
store data over long periods of 
time and to report trends. 



Pricing and availability of various products being introduced at 
NetWorld+lnterop: 



Vendor 


Product 


Price 


Availability 


Apptitude 


Visualizer 


Around S1 00.000 


June 


Compuware 


EcoScope 4.0 


Starts at 136,500 


June 


NDG 


HaRMONi agent 


$295 


July 


Savant 


QSensor 


Starts at $25,000 


Second half 1999 


SMARTS 


InCharge Switch 
Connectivity Manager 


Starts at $25,000 


June 


X-Cel 


Net-Tell DataBase 
Query 


Starts at $20,000 


Now 



• System Management Arts 
(SMARTS) will announce soft- 
ware to help diagnose prob- 
lems in LAN switches. In- 
Charge Switch Connectivity 
Manager checks for failures in 
Spanning Tree Protocol or vir- 
tual LANs. It discovers the net- 
work topology and uses that 
information to help figure out 
where the root cause of the 



Windows 2000 Beta 3 gets good early marks 



Fewer crashes, heightened 

BY JOHN FONTANA 

While most of the 650,000 
testers are still waiting for 
Beta 3 of Windows 2000, more 
than 20 Microsoft customers 
already have it up and running 
in production. 

Production use of beta code 
may not be for the faint of heart, 
but one enterprise is reporting 
encouraging early returns on 
performance. 

Jason Bruner. a systems 
administrator for VoiceStream 
Wireless, has had Beta 3 running 
on some of his production file 
servers for the past two 
months. As of last week, the 
software had been up for 782 
hours continuously without a 
failure or reboot. 

Improved beta 

"We are in the habit of trying 
to break things, but this is work- 
ing well," Bruner says, "Beta 3 is 
nothing like Beta 2. Beta 2 was 
buggy." 

Bruner says Beta 3 also lias 
solved past problems with 
major memory leaks and is 
roughly 55% faster than NT 4.0. 
"The fde system, security man- 
agement and application apti- 



secitrity management among features cited. 

tude appear real rock solid." he 
says. Bruner says his domains 
and security permissions are 
down to one architecture, from 
six previously. 

All of that is welcome news 
to NT users who plan to move 



Notes from the firing line 

A handful of Microsoft 
customers are running 
Windows 2000 Beta 3 in 
production. One user has had 
it up and running for two 
months with some encourag- 
ing results, such as: 

• 782 hours of operation without 
reboot or failure. 

• Elimination of major memory leaks. 

• Oomain and security permissions 
condensed to one architecture. 

• Increase in the number of 
connected peripherals. 



to Windows 2(XK) when it ships 
sometime this year. NTs Achil- 
les' heel has been its propensity 
to force network administrators 
to suffer through routine 
reboots and mysterious crashes. 
The NT problems have been 



so bad for some net administra- 
tors that the administrators 
have had to move some of their 
mission-critical applications, 
specifically electronic com- 
merce, off the platform. 

Joe Page, chief technology 
officer for Value America, says 
be plans to ditch NT in the near 
future because "NT can't handle 
high-volume electronic com- 
merce very well at all." 

Switching to Unix 

For more than a year. Value 
America, a Charlottesville, Va.. 
online retailer, has used 30 NT- 
based Internet Information 
Servers to support online Inter- 
net sales.The servers handle sev- 
eral hundred visitors every few 
minutes, but crash all too fre- 
quently, according to Page. "We 
constantly have to reboot the 
NT boxes," Page says, noting he 
will definitely switch to Unix. 

Similar concerns run deep 
among other NT users. 

"Even for strong NT shops. 
Active Directory is not the key. 
What | the shopsl want is a 
server they don't have to reboot 
every seven days," says John 
Kretz. president of Erdightcned 
Point Consulting Group. 



RebiK)ting, however, is not 
the only issue. 

Brad Williamson, a senior net- 
work analyst for petroleum 
refiner UOP LLC, hopes to flat- 
ten his domain structure, which 
now encompasses 15 separate 
areas that hold user names and 
passwords. He also plans to 
develop organizational units 
within Active Directory to dele- 
gate authority to his remote 
administrators without giving 
them the keys to the entire 
operating system. 

But what Williamson really 
hopes to solve is a problem 
with NT 4.0 in which upward 
of a third of his servers will 
crash at regular intervals for set 
periods of time before return- 
ing to function normally. 

"The servers are getting liit 
pretty hard, but one hopes to he 
able to [handle] that." William- 
son says. 

According to Karan Kahanna. 
lead product manager for the 
NT server team. Microsoft is 
addressing those concerns with 
enhanced symmetric multi- 
processor support, support for 
up to 64<i bytes of memory on 
some hardware and a mecha- 
nism called fast interconnect for 
I/O, which allows hardware to 
bypass much of the stack when 
communicating in a cluster. 

Senior editor Ellen Messtner 
contributed to this article. 



problem is. 

• Apptitude will enable its 
Visualizer tool to recognize 
multimedia, streaming video 
and audio traffic. 

Visualizer is a probe that 
tracks application conversa- 
tions and captures data from 
those conversations so that a 
network manager can analyze 
the data and find problems. The 
product can now isolate traffic 
using the International Tele- 
communication Union 11.323 
standard for transmitting audio 
and video over IP 

• X-Ccl Communications will 
add report-generating capabili- 
ties to its Net-Tell DataBase- 
Query software, which moni- 
tors bandwidth usage. The 
reports can show performance 
trends, indicate when band- 
width usage exceeds thresholds 
set by the user, and predict 
when problems might occur. 

Savant:(301) 581-0520; NDG: 
(619) 350-4815; Compuware: 
(248) 737-7300: SMARTS: < s~ > 
276-2787;Apptitude: ( i()8) 5~ i 
2300; X-Cel: (781) 2.384)256 




Net Know-lt-AII 

For the answer to this week's question and 
more dM trivw. visit Network World Fusion 
and enter 2467 in the DocFindct box. 



This week's question: 

Which well-known 
network product are Jeff 
Hawkins and Donna 
Duhinsky credited 
with creating? 



www.nwfusion.com 



14 Network World May 1 0, 1 999 www.nwfusion.com 



If your IT Management solution Fails, 
which thank-you gift will the boss be sending you? 



HEWLETT 
PACKARD 




The word is out Far too many enterprise 
management projects don't deliver. So, what's 
the hang up? Recent industry analyst studies 
reveal that most major framework 
implementations take too much time and 
don't deliver ROI. After years of work, only 
a small portion of purchased functionality is 
actually implemented. There is a better way. 

HP OpenView delivers measurable, proven 
results quickly and completely. A new 
independent head-to-head lab test' revealed 
"HP delivers on the promise of integrated 
tools to solve specific problems.- Unlike 
PLATINUM, CA and Tivoli, HP has not 
overloaded its solution with a common 
framework-. HPs generally flawless solution 
sets the mark against which to measure all 
other out-of-the-box functionality ". 

The OpenView approach is different from 
the "leap of faith" framework approach. 
Target your most pressing problem and 
solve it today. 

HP OpenView. Reach your management 
goals without getting hung in the process. 



Learn why OpenView has so many satisfied customers: 

http://www.openview.hp.com 
OR call 1-800-785-3925 



To Register for the OpenTech Series near you call 800-258-6236 or 
Visit our Website at openview.hp.com/opentech.html 
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Networld + Interop 

May 11-13 Las Vegas Booth 87553 



"Source Network Computing, Syracuse University Real-World Labs 1 . 1999. 
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InteropNet, 

continued from page 1 

more stable technology, and 
InteropNet Labs, a separate net 
for controlled demonstrations 
and lectures about technolo- 
gies deemed not ready for 
prime time. 

In previous years, the lnter- 
op network was always a sort 
of showcase — carrying real 
traffic among hundreds of 
exhibitor booths and out to the 
Internet. People attending the 
show got the chance to see the 
most talked about new tech- 
nologies work — or not work 
— in an environment similar to 
that of a corporate network. 
Not anymore, say longtime vol- 
unteers in the show's network 
operations center (NOC). 

"InteropNet is no longer 
really demonstrating anything," 
says Tripp Lilley. who is a NOC 
member in charge of address- 
ing. "It used to demonstrate 
interoperability, both in the 



sense of vendors interopcrat- 
ing and in the sense of tech- 
nologies intcropcraling — the 
old with the new." 

The show network has tradi- 
tionally been IP-based and has 
used the most advanced switch- 
ing and routing technology 
available. One year the underly- 
ing transport was ATM. another 



eight other vendors: ('heck 
Point, Computer Associates, 
Fluke. Hewlett-Packard, Liebert. 
Novell, Shomiti and Qwest. 

Detractors say the dual net- 
work scheme can't prove the 
latest gear actually works in a 
live network the way former 
IntcropNcts did. 

Show organizers disagree. 
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FDD! This year Gigabit Ethernet 
is the transport of choice. 

Now, though, all of the 
hottest technology — dense 
wave division multiplexing. 
Gigabit Ethernet over copper, 
voice over IP. virtual private net- 
works — will be segregated to 
the InteropNet labs network. 

InteropNet. the network that 
exhibitors will actually use, is 
based on off-the-shelf Cisco 
hardware supported by man- 
agement, firewall and intrusion 
detection products supplied by 





Try out our 
new online 

Readers Favorites & Greatest Survey 

"We have met the enemy, and he is us." — Pogo 

Don't miss your chance to stand up and be counted. 
Vote on 50 of perhaps the most consequential issues of 
this, or any other, millennium. 

We'll be online with five questions per week for the 
next seven weeks. Answer just five at a time, or complete 
the whole survey at once. On July 26, we'll publish the 
results in our You Issue, and you'll be able to see how your 
answers compare with those of fellow Network World 
readers. 

Get your corporate work out of the way early today, 
and get down to some decent Web interactivity at 
iArww.nwfusion.com. DocFinder: 2524. 

Here are this week's questions. Enjoy. 

1 - Favorite restaurant 

2. Greatest invention/discovery of all time 

3. Favorite sports hero (living or dead) 

4. Greatest city in the world 

5. Funniest TV sitcom of all time 



saying the network split gives 
attendees a better chance to 
learn hands-on about the latest 
hardware and software. Be- 
cause the gear won't be tied 
up running real traffic, people 
will have the chance to tinker 
with it. 

"Attendees can interact with 
technologies and interact with 
engineers who work on them," 



InteropNet or CiscoNet? 



old InteropNet Tlie show Web 
site describes the lab as a place 
"where truly bleeding-edge 
technologies can be tested and 
proven without the constraint 
of being required to work." 

In the past, vendors who put 
their gear through the rigors of 
InteropNet hastily fixed flaws 
and weaknesses that Interop- 
Net exposed, speeding the rate 
at which technology matured. 

For example, one year at the 
Las Vegas NetWorld+Interop 
show, InteropNet revealed that 
video multicast traffic was 
swamping the ATM network's 
broadcast-and-unknown servers 
(BUS). "By the time the Atlanta 
show rolled around that year, 
that problem was fixed in all 
the vendors' BUS servers," 
I Iultquist says. 

And vendors lament the new 
arrangement. For instance, 



from corporate enterprises 
who consider themselves to be 
the network elite. Membership 
was by invitation only and only 
after volunteers proved they 
could produce under pressure, 
lilley says. This year their num- 
ber has dipped from more than 
30 to fewer than 1 0, with the 
slack being picked up by ven- 
dor staff. 

The NOC team was so dedi- 
cated that one member, Martin 
Gear, was designated to make 
sure the rest didn't push 
themselves to exhaustion. "I 
once had two burly volun- 
teers bodily haul the chief 
engineer off the show floor, 
escort him to his hotel, turn 
off his cell phone, turn off his 
beeper and put him to bed," 
Gear says. 

That's when he created the 
"5-2-1 Rile: In even' 24 hours. 



InteropNet features a Gigabit Ethernet backbone from Cisco for handling booth-to-booth connectivity 
and providing exhibitors with Internet access. Cisco is supplying off-the-shelf backbone gear. 



North Hall 

Cisco 2900. 4000, 5000 and 6000 
booth access switches 



Network operations center 
1= Internet 



South Hall 

Cisco 2900. 4000,5000 and 6000 
booth access switches 
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says Steve Wiley, director of net- 
work operations for /I) Events, 
which runs the show. Before, 
those engineers were too busy 
running InteropNet to talk. 

But a test environment can't 
provide as thorough a work- 
out as a live production net- 
work, says Steve I Iultquist, a 
veteran of IS IntcropNcts. 
Once gear is in a real-world 
net, people put demands on 
equipment that engineers 
never thought of, he says. 

"The old tag line was: I know 
it works, I saw it at Interop," 
Hultquist says. "Now you won't 
know it works. It 's not real if it's 
in the labs. And if it's in the pro- 
duction network, well of 
course it works; it's [primarilyl 
one vendor's stuff" 

Even show literature ack- 
nowledges that InteropNet 
Labs is less challenging than the 



Fluke, which makes test gear 
used in InteropNet, regarded 
the old format is an extension 
of its research and develop- 
ment efforts, says Neal Allen. 
Fluke product marketing man- 
ager for LAN meters. 

Because Fluke got to test 
other vendors alpha and beta 
equipment, it got a six- to 12- 
month jump on developing 
new test gear, Allen says. In 
addition, Fluke engineers would 
observe NOC volunteers using 
new Fluke test equipment. 
Based on what the engineers 
saw. they would change fea- 
tures to make the test gear easi- 
er to use, Allen says. "Interop- 
Net has caused us to make con- 
siderable changes to products. 
Now about a third of the R&D 
opportunity is gone," he says. 

Also gone is the culture of 
the NOC, a group of volunteers 



Booth £ 
switches 

each NOC team member has to 
sleep for five hours, eat at least 
two meals and take one shower. 

"I believe we called it net- 
work camp for geeks." Allen 
says." You go there, have a lot of 
fun. see all your friends, pkty 
with all the latest toys — and 
then you go home." 

Hultquist holds his NOC 
membership in such esteem 
that he has registered noctcam. 
com as tUs domain name. Lilley 
has NOC team plaques hanging 
on the wall in lieu of academic 
diplomas. He mourns the pass- 
ing of the old InteropNet. 

"I grieve, both personally and 
professionally. You've lost a win- 
dow into an admittedly strange 
but telling reality," lilley says, 'ji 

Get mora Info online. 
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Capture more opportunities with Reflection" Web-to-host software. Staying competitive today 
means giving more users fast, reliable access to business-critical host information. And you've got 
to do it in less time, with less money. That's why you need WRQ Reflection. 
With Reflection, you get Web-enabled host access solutions that help you build your business and increase your 
competitive edge. So when the next opportunity comes clicking, you'll be ready. To learn more about Reflection or 
to request your free white paper on moving to e-business, call 888.323.1717, visit www.wrq.com/ads/clicksnww, or 
stop by the WRQ booth 2414, at NetWorld+Interop, Las Vegas. 

WRQ 
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SQL Server takes a big step 
toward enterprise capability 

and introduces dramatic ease-of-use improvements 
with version 7.0 of the database server." -pc week 1 

"New features extend SQL Server's performance and scalability.. .most of the changes will 

move SQL Server from the role of department server into the role 

of enterprise database server" -m^mm* 

"SQL Server 7.0 boasts "SQL Server 7.0 provides the 
5 YY% w\ V A O O I %# A flexibility, relational power, and 
llTipr wOOl V" continued ease of use that 

f a £1 1 1 1 Y & C shouid P ut the P roduct in the 
■ I wO corporate winner's 

that administrators and users ■ I 77 

Will both appreciate." -InfoWorld 3 vl I VlUi -Intelligent Enterprise 4 

"We recommend that you consider SQL Server 7.0 for new data 
warehousing projects ranging from departmental and line-of-business 

data warehousing 

even to the enterprise, 

especially if you're already a j Windows] NT shop." Mitch Kramer. Patricia Seyboid Group 

PC Week Best of Show, COMDEX/ Fall 1998 

Database and Server Software 

1998 Product of the Year -InfoWorld 5 




Microsoft 

Where do you want to go today?* 




SQLServerT.O 




It's great that critics think it's enterprise ready, but it's 
more important that we convince you. We invite you to find out more 
about Microsoft 8 SQL Server" 7.0 at www.microsoft.com/sql 



O 1999 Microsoft Corporation. All nghts reserved. Microsoft and Wttere 00 you want to go today? and Windows NT are either registered trademarks or trademarks oi Microsoft Corporation in the United States and/or other countries. Other products and company 
names mentioned here* may be the trademarks ot their respective owners. "-Reprinted from PC Week November 16. 1998. Copyright© 1998 ZD inc. All Rights Reserved. ^Windows NT. ^nfoWorid, 11/23/98 9/98 4 0BMS Magazine. 6/98 ^ntdWortd. 2/15/99 
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you said you need a strong ci 
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Dial backup around 
monitored Frame Relay 
networks 
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Protection from physical 
line, L M I , and PVC failure 



Available for ADTRAN 
integrated access 
systems, Frame Relay 
performance monitoring 
and access devices, 
Tl multiplexers, and 
56ktoTl DSU/CSUs 



Simple, field-installable 
cards 
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Cost-effective dial backup solutions for 
Frame Relay and dedicated wide area networks. 

When the circuit goes down, and anxiety starts rising, you'll remain calm. Because 
with ADTRAN termination equipment in your network, your connectivity solution 
includes comprehensive disaster recovery capabilities. More 
proactive than router-based recovery plans and more cost- 
effective than carrier-based methods, ADTRAN's dial backup 
solutions give you exactly what you need to prevent expensive 
downtime and keep your network operational. Whether your 
network is packet or dedicated, you're protected — even on 
monitored Frame Relay circuits. Modular, field-installable dial 
backup cards instantly bypass an inoperative circuit — with 
no technician, no lost time. Don't go another day without it 




Proactive disaster recovery 
solutions from ADTRAN 



Visit www.adtran.com/recovery for a free white paper on 
disaster recovery. Or, call 8?? 399-P541 (toll-free) and request 
a free copy of ADTRAN's disaster recovery brochure. 



ADTRAN is a registered trademark of ADTRAN. Inc. 

Free Product info enter NWInfoXpress #51 online @ www.networfcworld.com/lnfoxpress 
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Bull Information Systems has 

introduced three servers bundled 
with applications for either 
remote access, Web serving or 
storage management 

The Express5800 Remote 
Access Server includes a modem 
that provides remote offices and 
mobile users with access to cor- 
porate e-mail systems and the 
Internet. The Express5800 Cyber- 
prise Web Application Server lets 
firms deploy Web services. It is 
equipped with Wall Data's Cyber- 
prise Server and Cyberprise Host 
software, as well as Windows NT, 
Internet Information Server and 
SQL Server database. The Ex- 
pression. Storage Resource 
Management Server monitors the 
capacity, utilization and availabili- 
ty of disks, RAID subsystems, 
partitions and directories in NT 
environments. 

Bull's Express58O0 servers are 
available with Pentium II, III and 
III Xeon processors and up to 2M 
bytes of Level 2 cache. Bull offers 
as many as eight processors per 
server. The servers support disk 
capacities of more than 70G bytes. 

The Remote Access Server 
starts at $1 2,000, the Cyberprise 
server at S17.5O0 and the storage 
management server at $5,400. 

Bull: (978) 294-6000 

Computsrm has announced a 
device that mirrors data between 
mainframes and disks across 
WANs. The VMC 8800 Remote- 
Copy box connects to a remote 
mirroring control device attached 
to a mainframe's Enterprise Sys- 
tems Connection IESCONI chan- 
nel. The 8800 runs 17M byte/sec 
ESC0N traffic over a T-3 or 0C-3 
WAN to another 8800, and from 
there, to another mirroring con- 
trol device attached to a main- 
frame or storage devices. 
Computerm claims its technology 
has no distance limitation. 

The device is available this 
month and starts at $50,000. 

Computerm: (800) 873-0303 



Infrastructure 

_ TCP/IP. LAN/WAN Switches, Routers, Hubs. Access Devices, 

Clients, Servers. Operating Systems. VPNs. Matworked Storage 

Adtran puts emphasis on the enterprise 



Finding an alternate route 



New Safe-T-Nel software for Adtran's Atlas 800 can get your traffic to its intended 
destination even when frame relay lines are down. 



O The frame relay link to Site A goes down. 




Router 



O Site A's DSU 
IQ uses ISDN 
to dial around 
the frame 
relay failure. 



ISDN 



Site B 

Atlas 800 



O The Atlas 800 integrated 
access device with Safe-T- 
Net software directs traffic 
to the correct destination - 
in this case, Site C. 



BY TIM GREENE 

LAS VEGAS — Looking to shed its 
image as a maker of carrier gear only, 
Adtran this week will begin calling more 
attention to its enterprise WAN gear 
with the formation of a new unit dedi- 
cated to this market. 

NETW RLD INTEROP 99 

The Enterprise Networks Division, 
which will oversee Adtran's DSU/CSU, 
ISDN router and T-l access equipment 
lines, makes its debut at NctWorld+ 
Interop 99. 

The group will celebrate by introduc- 
ing new software that helps customers 
back up their frame relay networks. In 
the event that a frame relay connection 
breaks, the product lets customers route 
traffic over ISDN links, which can be less 
expensive than redundant frame relay 
connections. 

"It makes good sense for backing up 
your frame relay network, assuming the 
ISDN is available in the locations needed 
at a reasonable price," says Tim Smith, an 
analyst at Dataqucst. 

Since the AT&T frame relay network 
crashed last year leaving entire corpo- 
rate networks down for hours, net exec- 
utives have been seeking new frame 



relay backup options. 

Adtran's new Safe-T-Net software can 
be used to upgrade an existing Adtran 
Atlas 800 integrated access device. The 
new technology enables the Atlas 800 to 
handle traffic from up to 96 backup con- 
nections. Typically, traffic would be sent 
to the Atlas 800 via ISDN from Adtran 
DSLI IQs or Express frame relay access 
devices at remote sites. The Atlas 800, 
receiving the traffic over ISDN Primary 



Rate Interface connections, would direct 
traffic to its destination or destinations 
via healthy frame relay lines or other 
ISDN links. 

Dataqucst s Smith warns dial ISDN rates 
vary widely depending on the carrier, so 
customers should check local rates for 
ISDN and compare them to local rates for 
buying redundant frame relay connec- 
tions from two different carriers. 

See Adtran, page 22 



Cisco tool eases management of legacy networks 



SNA View 2.0 lets users monitor 

BY MARC SONGINI 

RESEARCH TRIANGLE PARK, N.C. 
— If you are looking for a simple way 
to manage your mixed SNA and TCP/IP 
networks, new software from Cisco 
may help. 



More 



nline 



SNA View 2.0 release notes, 

A look at changes in Cisco's InterWorks 
business unit. 



1 2832 milium 



www. . 

nwfusion.com 



mixed SNA and TCP/IP nets from 

The company last week rolled out 
SNA View 2.0, which lets network 
executives use a browser to monitor, 
track and troubleshoot SNA and TCP/IP 
sessions. Typically, users with SNA and 
IP nets must monitor each from a sepa- 
rate screen, making it difficult to locate 
and solve problems. 

The previous version of SNA View, 
1.0, could not monitor SNA 3270 ses- 
sions or Data Link Switching (DLSw) 
traffic. DLSw lets SNA traffic run over a 
TCP/IP backbone. 

Prom a browser, SNA View 2.0 
customers can monitor SNA traffic, 
such as 3270 and Advanced Peer- 
to-Peer Networking, or IP-oriented 
SNA traffic, such as tn3270 and 
DLSw, running through the mainframe 
or Cisco's routers. Tn3270 technology 
lets PC users access SNA resources 



a browser. 

over IP networks. 

SNA View 2.0 runs on a Unix Web 
server and extracts SNA network data 
from the mainframe by tapping into 
Virtual Telecommunications Access 
Method (VTAM), the program that con- 
trols SNA communications with a main- 
frame. To access IP router and tn3270 
servers in the network, the product 
uses SNMP tools. 

Once in place, SNA View 2.0 has 
search tools that can locate client 
session paths based on factors 
such as SNA physical unit or 
logical unit names. It can also locate 
the LAN Media Access Control and 
IP addresses. From there, users 
can pinpoint problems, such as 
session outages. 

SNA View 2.0 data can also be for- 
See Cisco, page 26 
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FORE's Hydra switch leaves the drawing board 



VA Research steps 
up Linux campaign 

Company makes two acquisitions, changes name. 



BY ROBIN 

SCHREIER HOHMAN 

MOUNTAIN VIEW; CALIF — 
VA Research Is buying two 
other Linux companies to fur- 
ther its mission of bringing the 
open source operating system 
to enterprise networks. 

VA Research is further 
emphasizing its focus on Linux 
by changing the company's 
name to VA Linux Systems. In 
addition, the company is set- 
ting up a research lab to help 
develop the Linux kernel and 
port applications to the operat- 
ing system. 



but the real motivation is to gain 
employees who know Linux 
and the Linux community. 

"When you find them 
you've got to grab them 
because it's a lot harder to 
grow them," says VA CEO Larry 
Augustin, who co-founded the 
company in 1993 while he 
was a graduate student at 
Stanford University. 

Last month, the company 
bought Electric Lichen, a mar- 
keting and consulting firm 
with offices in New York and 
San Francisco. The New York 
offices became the VA sales 
and support center. 



BY JEFF CARUSO 

PITTSBURGH — FORE Sys- 
tems last week began shipping 
the first manifestation of its 
hybrid ATM-Ethernet switch, 
code-named Hydra. 

The switch, the ESX-3000, 
has eight slots that users can 
fill with ATM or Ethernet 
cards The switch can hold up 
to 128 ports of OC-3 (155M 
bit/sec) ATM or 32 ports of 
OC-12 (622M bit/sec) ATM. 
Ethernet cards will ship in the 
third quarter and will provide 
up to 192 ports of 10/100M 
bit/sec Ethernet in the switch. 

The ESX-3000 comes with a 
10G bit/sec or 20G bit/sec 
backplane and is ready for 
OC-48 (2.5G bit/sec)ATM con- 
nections, FORE says. 

The product can maintain 
high speeds because it puts 




FORE's ESX-3000 can be packed 
with ATM and Ethernet parts. 

the segmentation and reassem- 
bly (SAR) function in the hard- 
ware, according to FORE. The 
SAR chips translate Ethernet 
frames into ATM cells and back 
again. Each card has its own 
SAR chips. 

FORE also introduced a soft- 



ware agent for its ESX line of 
switches that is intended to 
optimize the passing of SAP 
R/3 traffic through the switch. 
The agent, called ERP Express, 
ensures that traffic associated 
with enterprise resource plan- 
ning gets through in a timely 
manner. 

FORE will introduce simi- 
lar agents in the future for 
other types of traffic, such as 
voice that uses the ITU H.323 
standard. 

The ESX-3000 is available 
now with ATM ports and 
starts at about $21 ,000 for the 
20G bit/sec version. 

The ERP Express will ship 
in the third quarter for the 
ESX-2400 and ESX-4800, and 
will cost roughly $11,000. A 
future release will be de- 
signed for the ESX-3000. 

FORE: (888) 404-0444 



PROFILE: VA LINUX SYSTEMS 
(FORMERLY VA RESEARCH) 

Mountain View, Calif. 



Founded: 


1993 


Primary business: 


Workstations and servers optimized tor Linux 


Management: 


Larry Augustin. co-founder, president and CEO. Leonard 




Zubkoff. chief technology officer; board of directors 




includes Carl fledfield of Cisco and Jeff Allen of 




Network Appliance 


Employees: 108 


Fun fact: 


Augustin founded the company while he was a graduate 




student at Stanford University. 



The lab will work on mak- 
ing Linux more scalable by 
porting it to Intel's new 64-bit 
processor architecture, as well 
as to new eight-way processor- 
based machines and larger 
RAID arrays. 

Acquisition spree 

The company is buying 
Enlightenment Solutions, a 
Linux marketing and services 
company, that co-developed a 
Linux desktop manager that is 
used in Red Hat Linux 6.0, as 
well as a configuration tool for 
the Apache Web server. 

VA is also buying Linux 
Hardware Solutions, which 
sells Linux computers similar 
to those sold by VA. 

VA declined to say how 
much it is paying for either 
company. 

Under the transactions, the 
company acquires some assets, 



VA has more than tripled its 
number of employees this 
year, starting with less than 30 
employees in January and 
reporting 108 now. 

The company continues to 
grow and has a number of job 
openings 

In March, Intel bought a 
stake in the company but 
refused to disclose the amount 
paid. In September, Sequoia 
Capital invested in VA, as well. 

Augustin declined to com- 
ment on VA's revenue but says 
most of the company's sales 
are to enterprise customers. 

In 1998, revenue generated 
by the sale of Linux software 
worldwide totaled $38 million, 
according to Dan Kusnetzky, 
an analyst at International Data 
Corp. GDC), a Framlngham, 
Mass., market research firm. 

IDC does not currently 
track Linux hardware sales. □ 



Big Iron gets big performance bump 



BY JEANETTE 
BORZO 

IBM's new mainframe line — 
the S/390 Parallel Enterprise 
Server Generation 6 (G6) — is 
aimed at customers who need 
to handle high-volume elec- 
tronic commerce transactions. 

The G6 also offers options 
to support Fibre Connection 
(FICON), Gigabit Ethernet net- 
works and Parallel Sysplex clus- 
tering. FICON is IBM's latest 
high-performance I/O interface 
for Big Iron. 

Earlier this year, IBM up- 
graded the S/390's operating 



system software — OS/390 — 
offering enhancements in net- 
work support, security and 
systems management. The 
hardware upgrade coupled 
with the operating system 
upgrade is meant to increase 
the viability of S/390 main- 
frames for e-commerce, online 
retailers and Web brokerages 
by positioning the mainframe 
as a better option than high- 
end Unix servers, IBM says. 

The microprocessors in the 
largest G6 system run at 
637 MHz so the system can 
deliver more than 1 ,600 MIPS. 
This advance represents a 



more than 50% increase in 
MIPS over the G5 mainframe, 
IBM claims. 

The S/390 G6, due to ship 
May 28, is the company's first 
mainframe or enterprise server 
to use Big Blue's copper chip 
technology. The new chips 
increase speed and capacity, 
cost less and use less electricity 
than existing aluminum chips. 
G6 pricing was not available. 

For more information, con- 
tact IBM at (914) 765-1900. 

Borzo is a corespondent 
with the IDG News Service's 
Paris bureau. 



Adtran, 

continued from page 21 

Adtran's Safe-T-Net also 
allows the Atlas 800 to back 
up different frame relay 
intranets within an enterprise. 

For example, if an engineer- 
ing group within a corpora- 
tion has a separate network 
from the sales force, the Atlas 
800 can back up both groups 
and keep traffic from the two 
networks separate. 

The backup system handles 
data and voice over frame 
relay. 



The Safe-T-Net software is 
free but requires ISDN hard- 
ware modules costing about 
$2,300. 

Still selling to carriers 

In addition to re-energizing 
its enterprise network efforts, 
Adtran is changing the name 
of its telco division to Carrier 
Networks Division. 

The new name is part of 
Adtran's plan to emphasize 
the company's gear for 
upstart carriers and ISPs as 
well as for traditional phone 
companies. 



The first new product out 
of this renamed division is the 
Total Access 750, a T-l access 
device that would sit at a cus- 
tomer site but would proba- 
bly be sold and managed by a 
carrier. 

Customers will be able to 
directly tie their LANs, PBXs 
and video gear into the access 
device, potentially eliminating 
the need for separate T-ls for 
voice and data. 

Total Access 750 costs 
$2,545 and will be available 
next month. 

Adtran: (800) 923-8726 
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Ours. Every new Compaq Deskpro is warranted to be Y2K 
hardware compliant 5 and the time to celebrate that is right 
now. Experts say to be Y2K-ready well in advance, and PC 



Whose warranty 
says you'll 
have one? 



replacement (especially at new Compaq Deskpro 
prices) is the easiest thing to put behind you. Of course, what's ahead matters, p ^hi 
too. Every Compaq Deskpro is optimized for the enterprise — not just powerful but 
manageable (pre-loaded with industry-leading asset management tools), compatible, 
serviceable and famously reliable. For the reseller nearest you call 1-800 -AT-COMPAQ. 
Visit us at www.compaq.com/happy2K. 

Compaq Deskpro EN at H,299 INCLUDING MONITOR 




• Pentium* II processor 350 MHz ■ 32 MB RAM • V5O0 15 - (13.8 - viewable) monitor 

■ 4.3 GB SMART II Ultra ATA Hard Drive' • ATI RAGE PRO TURBO AGP Graphics • 3-year limited warranty' 




COMPAQ. Better 
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ArrowPoint to give Web switch Gigabit Ethernet boost 



HY KOIilN SCIIRE1ER IIOIIMAN 

LAS VEGAS — ArrowPoint this 
week will unveil the first Giga- 



bit Ethernet modules for its high- 
enil Web switch, enabling intelligent 
load balancing for very large enter- 
prise server farms 



The two- and four-port modules 
will be available for the chassis-based 
CS-800 Content Smart Web switches. 
The modules will ship with snap-on 
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HERE IS EQUANT 
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3:17 p.m. Paris. 



Your largest customer is considering an acquisition in 



Prague. He says he wants information. What he really 



wants is your insight and expertise. Is the market 



viable? Can he count on you for local support? He needs 



answers. You need to get your people in New York. 



London and Prague all crunching numbers at the 



same time. Worried? Of course not. Your intranet was 



built by Equant. It connects your Lotus Notes and 



provides extremely secure connections to the Internet. 



And only Equant lets you tap into a network covering 



220 countries and territories. Safely. Instantaneously. 



All because we own and operate the largest private 



network on earth. Deregulation, global expansion and 



acquisitions are part of life. Isn't it nice to know 



Equant has your world covered. 



www.equant.com 

ftMtfctttl 888 731 3IO0 Europe »44 (0| 181 171 4000 
Asia Pacific »65 332 9288 
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Gigabit Interface Converters (GBIC), 
which provide the interface for 
multimode fiber Gigabit Ethernet 
connections. GBICs allow users 
to change the blade interface 
themselves. 

NETWMRLP INTEROP gjjj] 

Separately, ArrowPoint last week 
announced Smart Content Repli- 
cation software that will enable the 
switches to pinpoint the cause of 
spikes in Web traffic. 

If there is a big increase in 
Web traffic, the switch determines 
what page or pages are causing 
the increase, replicates the data 
and puts it on another data store, such 
as a Web cache or Web server. 

The CS-800 can process 20,000 
HTTP flow setups per second by 
using distributed processors rather 
than a central processor to handle 
traffic. 




New ArrowPoint software enables the 
company's switches to get to the bottom 
of traffic spikes. 

One analyst says ArrowPoint's 
new software may appeal to many- 
ISPs. 

"It gives the ISPs a service they 
can turn around and resell, which 
is what they're looking for," says 
Stan Schatt, an analyst at Giga 
Information Group. 

The software will enable ISPs to 
sell service guarantees — which are 
pure profit for them — in the same- 
way that the telephone companies 
can sell call-waiting or call-forwarding 
services. 

The two-port module for multi- 
mode fiber will sell for $7,000, and the 
four-port module for multimode fiber 
will cost $8,000. 

ArrowPoint expects to ship the 
blades in 60 days. 

The Smart Content Replication 
software will be available in July and 
is priced at roughly $20,000 for the 
CS-800 and $8,000 for the lower-end 
CS-100 switch. 

ArrowPoint: (978) 692-5875 
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How can you be certain you're getting the most reliable 
frame relay and ATM services from your carrier? 




^Free Infonetics White Paper "Cost of WAN Downtime" • www.visualnetworks.com/nw^ 
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What do the leading network 
security companies all agree on? 

OPSEC 

Authentication 

ActivCard Token 

AXENT Defender Security Server 
Blockade Enterprise Security Server 
CRYPTOCard CRYPTOServer 
Funk Software Steel-Belted Radius 
LeeMah DataCom TraqNet 8000 
Netegrity SiteMinder 
Secure Computing SafeWord 
Security Dynamics ACE/Server 
Vasco Corporation VACMan 
Content Security 

Aladdin Knowledge Systems eSafe Protect Gateway 
Aliroo PrivaWall 

ContentTechnologies MIMEsweeper for FircWall-1 

Log On Data X-STOP for FireWall-1 

NetPartners WebSENSE for FireWall-1 

Secure Computing Smart Filter 

Security-7 Software SafeGate 

SurfWatch Software SurfWatch for FireWall-1 

Symantec Norton Antivirus for Firewalls 

Trend Micro InterScan VirusWall 

URlabs Inc. I-Gear 
Directory Management 

IBM eCommerce Directory Server 

Netscape Directory Server 

Novell NDS 
Event Analysis And Reporting 

Micromuse Netcool/FireWall-1 

SecurelT Firewall HealthCHECK 

SecurelT SecureVIEW 

Telemate Software TELEMATE.Net 

WebTrends WebTrends for Firewalls 8nd VPNs 
High Availabitity 

Legato Systems FullTimeHA+ 

Marathon Endurance 4000 

Nokia IP Series Router/Firewall 

RADWARE RADWARE FireProof 

RSi Solutions RSF-1 

Stonesoft Corporation StoneBeat 

Veritas Software FirstWatch 
Intrusion Detection 

Check Point RealSecure 

ISS RealSecure 

Memco SECURED for FireWall-1 
Other Technology 

Chrysalis-ITS Check Point Accelerator Card 

RSA BSAFE SSL-C 
Securely Managed Applications 

BackWeb Technologies BackWeb Channel Server 

Campbell Services OnTime Enterprise NT 

Citrix WinFrame 

e-motion Creative Partner 

FreeTel Communications FreeTel Personal Edition 

Microsoft NetMeeting 

Netscape Communications CoolTalk 

Netscape Communications Communicator 

Netscape Communications Conference 

Oracle Corporation SQL'NET 

PointCast PointCast Network 

Progressive Networks RealAudio 

Sybase jConnect for JDBC 

Sybase Open Client 

Sybase SQLServer 

VDOnet VDOLive 

Vosaic Vosaic Media Suite 

VXtreme Web Theater 

White Pine CU-SeeMe 

White Pine Reflector 

Xing Streamworks 

Networking 

FORE Systems - ESX Switches 
Nokia IP Series Router/Firewall 
Nortel Networks for BN and ASN 
Nortel Networks for ARN and System 5000 
0DS Networks 

Xylan OmniSwitch and PizzaSwitch 
Servers 

Compaq ProLiant 
Dell PowerEdge 
IBM FireWall-I for RS/6000 
Hewlett-Packard NetServer 
Hewlett-Packard 9000 series 
NCR Corporation WorldMark Server 
Sun Microsystems FireWall-1 for Sun/OS 
Sun Microsystems FireWall-1 for Solaris 



This is a subset of OPSEC partners. For the rest of the 
companies committed to OPSEC. visit www.opsec.com. 
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Gadzoox adds spice to 
shared storage nets 

Capellix switch expands from six to 34 ports. 



BY DEM CONNOR 

SAN JOSE — Gadzoox Networks is 
readying a modular Fibre Channel 
device thai lets companies extend 
the benefits of switch-based storage 
networks to those anchored by 
shared hubs. 

The company's new Capellix device 
enables switch capabilities such as zon- 
ing, which involves the authentication 




Gadzoox s Capellix switch can be used to off-load 
backup work from servers. 



of servers to individual storage devices 
and the ability of servers to share differ- 
ent parts of a disk at die same lime. 

The chassis-based switch sits 
between a Fibre Channel arbitrated 
loop storage network and one based 
on a switched-fabric device from the 
likes of Brocade Communications or 
Ancor. Plunking the switch into such a 
network does not require the cus- 
tomer to swap out host bus adapters. 
RAID controllers or drivers. 

Capellix can be used to off-load data 
backup tasks from servers. The server 
simply needs to hand the data off to 
the switch, which will cache it and 
transfer the data to storage devices. 
Capellix can also handle the mirroring 
of data between storage devices. 

The switch can be expanded from 
six to 34 ports based on coaxial or 



fiber-optic cabling, or a combination of 
the two. Capellix employs a 2HG 
bit/sec switched backplane and will 
gain ATM support in the future. 

Modules can be swapped in and out 
while the switch is running. Capellix 
also features dual fans and power sup- 
plies for fault tolerance. 

Capellix fits in a standard rack- 
mount enclosure, and in its most com- 
plete configuration, the switch is only 
8 inches high. 

Customers can manage the 
switch using embedded soft- 
ware called Reflex II, which 
monitors, detects and isolates 
disruptive network events 
caused by power fluctuations, 
rebooting or intermittent port 
failure. 

Additionally, users can man- 
age the switch's configuration 
via Gadzoox 's Ventana SAN 
Manager software. Out-of-band 
management can be used it 
the network is down. 

Gadzoox owns about two-thirds of" 
the fibre Channel hub and switch mar- 
ket based on revenue, according to 
International Data Corp. (IDC), a 
Framingham, Mass., market research 
firm. The market is growing steadily 
and could reach $1.5 billion by 2003, 
says Robert Gray, an IDC analyst who 
is impressed with Capellix's flexible 
architecture. 

Gadzoox shipped its first product, 
an unmanaged Fibre Channel hub. 
three years ago and followed it with a 
managed hub and storage management 
software one year later. Last year, the 
company introduced its first switch 

The new switch will be available in 
the third quarter with pricing starting 
at less than $10,000. 

Gadzoox: (408) 360-7360 



Cisco, 

continued from page 21 

warded to IBM's NetView for OS/390 
or Cisco's CiscoWorks Blue manage- 
ment suite. Users can utilize these plat- 
forms to issue trouble tickets or initiate 
automated problem responses. 

One beta tester, who works for a 
large service provider that has thou- 
sands of SNA terminals and a large IP 
backbone, gave SNA View 2.0 the 
thumbs up. 

The IS manager, who spoke on condi- 



tioas of anonymity, says his net needed a 
tool that could track SNA data running 
over a DLSw backbone. Given the >izc 
and heterogeneity of his enterprise, he 
says it can be "nightmarish" to correlate 
session data. Investigating a failure 
among his SNA and DLSw nets was a 
slow, painstaking task. SNA View 2.0 
reduced problem resolution time from 
20 minutes to 2 minutes. "We were very 
impressed," he says. 

SNA View 2.0 is available now. Pricing 
for the software starts at $5,000. 

Cisco: (800) 553-6387 
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Status symbol. 

OPSEC certification by Check Point sets the architectural 
standard for secure enterprise networking. 

When it comes to network security, you can't take chances. That's why you need to 
look for products and services that carry the OPSEC symbol. OPSEC compliance 
guarantees interoperability for all your network security needs. OPSEC (Open 
Platform for Secure Enterprise Connectivity) has become the de facto standard for 
the seamless integration of best-of-breed security products and services. Nearly 
200 companies have committed to development with the OPSEC Architecture 
today. Which means you can choose the best solutions, secure in the knowledge 
that your hardware, software and services will work together to give you the 
highest possible performance. 



Download free evaluation software and register for a free Tech Note 
explaining the OPSEC Architecture today at www.opsec.com/ad. 



Check Point 



Software Technologies Ltd. 




CHECK POINT SOFTWARE TECHNOLOGIES, LTD. Check Point, the Check Point logo. OPSEC are trademarks or registered trademarks of Check Point Software Technologies Ltd. All 
other product names mentioned herein are trademarks of their respective owners 

Free Product info enter NWInfoXpress #30 online @ vnvw.networkworld.com/infoxpress 
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FlowWise enhances router acceleration 



H Y JIM DUFFY software for its router accelerators thai Router accelerators are hardware 

enables users to stack the products and devices that increase the performance of 
SAW JOSE — FlowWise has unveiled support more 1A.N segments. IP router networks with minimal recon- 




On the net without a net? 

You need a firewall, an affordable, easy to use solution that has rock-solid security, supports 
all your Internet needs, and that you can trust to stay with you as the Internet grows and changes. 

BorderWare has been providing this to thousands of users since the Internet explosion began. 
Version 6 introduces new advanced features, better performance and lower cost of ownership. 
Find out how BorderWare can be your safety net today. Visit www.borderware.com 



BORDERWARE 

I "[technologies Inc. 



90 Burnhamthorpe Rd West, Suite 1402. Mississauga. Ontario. Canada. L5B 3C3 
Toll Free 1-877-814-7900 
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figuration. The accelerators assume 
some of the Layer 3 functions of routers 
without the network reconfiguration 
hassles of Layer 3 switches. FlowWise 
claims. Users need only 10 minutes to 
configure router accelerators, and they 
do not have to reconfigure router pons, 
the company says. 

The new software packages for 
FlowWise s IMS router accelerators are 
called AutoPort and CatStak. AutoPort 
enables the router accelerators to sup- 
port more ports and LAN segments 
without adding ports to the router. 

Currently, users have to dedicate two 
IMS router accelerator ports when con- 
necting workgroup or server farm 
switches to a router. That means a 16- 
port IMS 1600 router accelerator could 
attach up to eight IAN segments or IP 
subnets to a router. 

AutoPort enables users to dedicate 
only one IMS 1600 port to the router 
while the other 1 5 can be used to attach 
downstream LAN switches. This almost 




FlowWise's 1600 router accelerator will 
be more powerful with new software. 

doubles the number of LAN segments 
or IP subnets altVport IMS can support. 

"One of the things I'm dealing with is 
smaller IP subnets," says FlowWise user 
Ben Beasley, a network consultant in the 
payment services division at the state of 
California's Department of Health Ser- 
vices. "Users are having a tough time- 
when they get over three or four subnets 
per Ethernet port on the router. AutoPort 
will allow us to manage all subnets and 
let the router do w r hat it does best." 

CatStak software lets users support 
even more segments and subnets in an 
IMS environment. The software pro- 
vides the glue needed to stack up to 64 
router accelerators through a Cisco 
Catalyst LAN switch. Cisco's Ether- 
Channel technology, which aggregates 
Ethernet links into fatter pipes, can be 
used to provide fault-tolerant links 
between router accelerators in a stack. 

A 64-accelerator stack would add up 
to nearly 900 wire-speed Layer 3 Fast 
Ethernet ports.Trus configuration would 
deliver 192G bit/sec of bandwidth and 
130 million packet/sec of throughput, 
which FlowWise says is more than 100 
times the performance of a Catalyst LAN 
switch with a Cisco NetFlow Feature 
Card. A NetFlow Feature Card adds Layer 
3 switching to a Catalyst LAN switch. 

With CatStak software, users can also 
bypass the router and switch reconfigu- 
ration required by the NetFlow Feature 
Card. FlowWise says. 

CatStak and AutoPort cost $2,000 as a 
bundled package. The software will be 
available this summer. 

FlowWise: (408) 47+0385 




Whoever called the 
unknown "great" 
never managed a 

corporate network. 





Introducing 
The Symantec Digital Immune System 



As enterprises extend beyond four familiar walls in search of 
greater productivity, each system is exposed to new potential 
problems. Connect all those potential problems, add the Internet, 
and you begin to sense the scope of the threat to the network, 
and those responsible for it. 

To deal with the known and unknown threats to productivity 
inherent in today's corporate IT environment, Symantec has devel- 
oped a Digital Immune System. This integrated package of best-of- 
breed solutions can not only protect, but instantly respond to a range 
of threats to the network, before they become serious problems. A 
suite of intelligent tools to keep systems at peak performance, the 
Symantec Digital Immune System finally gives IT what it needs to 
succeed in the face of growing demands, limited resources and the 
not-so-great unknown. 



SYMANTEC. 



Call US at 1-800-745-6054. ext. 9NK1 
or visit www.digital-immune-software.com 

for information and a FREE Digital hnmUM System CD ROM. 



Offer valid only in the (luted Stares. Symantec anil ihc Symantec logo arc U.S. registered trademark, and Symantec Digital 
Immune System is a trademark d Symantec | 'MM! All other brand names and trademarks are 
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Xylan switches gain policy features 

BY JEFF CARUSO week announced it has embedded pol- address management software and 

icy software — including a policy directory services — into its switches. 
CALABASAS, CALIF — Xylan last server, an authentication service, IP The move is the latest in a series of 
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VPN over ATM 
T-1 Solutions 



An Integrated Network for Your Private IP, 
Frame Relay, or ATM Wide Area VPN Needs. 



If you are in the market for VPN services or in need of additional 
capacity. Backbone Communications Inc., cordially invites you to at- 
tend a half-day seminar introducing our sub S1200 T-1 based VPN 
over ATM solution portfolio which provides all the necessary elements 
needed to implement your VPN. The seminar features presentations 
by Telechoice, BBCOM, Williams. Unisys. UUnet and VPnet. and will 
be held in Los Angeles on May 20th. San Francisco on June 15th. 
New York on August 5th, Chicago on October 14th and Dallas on 
November 17th. To register, please visit our website at bbcominc.com, 
call (800) 987-1111 or send us an e-mail at mfraser@bbcominc.com. 
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policy-related product announcements 
from key network players, also includ- 
ing Extreme Networks, IBM and 
Lucent. Policy-based networking is the 
ability to grant users varying levels of 
access to network resources, such as 
servers and network bandwidth. 

" Making network devices more intel- 
ligent is the way to go," says Mike 
McConnell, a director at Infonetics 
Research in San Jose. Unfortunately, 
most vendors, including Xylan, are 
implementing policy-based network- 
ing for their own devices, rather than 
creating policies that interoperate. 

Network administrators can now use 
a policy server from Xylan to give traf- 
fic associated with certain applications 
or servers various levels of priority and 
bandwidth through Xylan switches. 

The company's new authcnticaUon 
service requires users to log on to the 
network.The software accesses security 




(.networkworld.com/infoxpress 



Users can now set policies to manage 
Xylan switches. 

databases using either Remote 
Authentication Dial-In User Service or 
Lightweight Directory Access Protocol 
(LDAP) to verify- that the users are 
allowed access to resources. 

For directory serv ices, Xylan switch- 
es use an LDAP client to access a direc- 
tory server. This way, the switches 
know what policies to assign to users 
listed in the directory. 

For IP address management, Xylan 
uses tlie Dynamic Host Configuration 
Protocol and Domain Name Service soft- 
ware from Lucent's Quadrilek division. 
As users log on to the net, the IP Control 
software assigns them temporary IP 
addresses.This allows more flexibility for 
moving users around the network. 

Xylan is also shipping a Java-based 
management application, called QoS 
PolicyView, which helps network man- 
agers build policies and set them on 
Xylan switches. 

The policy server and the authentica- 
tion service have the same price: $2,000 
for Xylan's chassis-based switches, and 
$1,000 for its stackable switches. QoS 
PolicyView costs roughly $20,000.Thc 
LDAP client is free with Xylan switches. 
IP Control costs about $500. 

Xylan: (818) 880-3500 
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Medical knowledge doubles 



every seven years. 



We know a service provider 



who sends it to 5,000 customers 



in 20 countries. Daily. 



Yes, we do make house calls. 



(□Cisco 



The latest medical breakthrough isn't a breakthrough until it reaches 
the patient who needs it. Which is why the company that keeps 
physicians in 20 countries up-to-date with the latest advances in medicine 
relies on the expertise of a Cisco Powered Network 11 ' service provider. 

Welcome to the New World - where Cisco Powered Network 
service providers are changing the way people share ideas and 
information in extraordinary ways. Amazing, but hardly unexpected. 
Because virtually all Internet traffic in the world travels across the 
systems of one company. Cisco Systems. Let us help you accomplish 
the same remarkable things for your business. Look for the Cisco 
Powered Network mark or visit us at www.cisco.com/cpn. 

We'll match you with a Cisco Powered 
Network service provider who can reliably extend 
your network over a Cisco-based infrastructure. 
And beyond. 



Cisco Systems 



Visit our Partner Pavilion at N e t W o r I d + I n t e r o p '99 Las Vegas, booth 7169. 
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Integrators unite to ease thin-client projects 

Companies say they offer the thin-client expertise that larger integrators, such as EDS and KPMG, lack. 



BY JOHN COX 

Ten systems integrators have band- 
ed together to speed thin-client 
deployments for large customers. 

Members of the new Thin Client 
Organization (TCO) will work togeth- 
er to install and support Windows- 
based thin-client networks, especially 
those that extend across widely sepa- 
rated geographical areas. 

"The primary purpose is to let the 
best thin-client integrators address 
enterprise customers' needs for 
national deployments," says William 
Botti, president of Computer Net- 
works, a Plcasanton, Calif., integrator 
and charter member of the TCO. 

It's no accident that the group goes 
by the acronym "TCO" which also rep- 
resents the term "total cost of owner- 
ship." Part of the appeal of thin-client 



technology is that it can 
reduce costs by moving 
applications to central serv- 
ers and replacing full-blown 
PCs with inexpensive desk- 
top terminals. 

TCO members focus on 
building networks anchored 
by multiuser Windows NT 
servers running Citrix Sys- 
tems' WinFrame or Windows 
NT 4.0 Server Terminal 
Server Edition. 



Thin Client Organization (TCO) 



Mission: 

To coordinate nationwide service and support for large thin-client customers 
and share among group members information and experience about technology, 
operations and marketing. 

Charter members: 

Async Technologies, Michigan, Computer Networks and Micro Visions, California; 
InfoLAN, Missouri; LanTech. Indiana; Moose Logic, Washington; Omnitech 
Corporate Solutions, New Jersey; Syntax, Minnesota; Vector Technology, Texas; 
Vertical Software, Maryland 

All members are Citrix resellers and Microsoft Solutions Providers. 



Getting down to business 

Here's how TCO will oper- 
ate: A customer that is based in 
California but has sites across the U.S. 
could approach Computer Networks 
to build a thin-client architecture. 
Computer Networks would then 
serve as the project manager and 
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An essential tool for any 
NOC, Data Center or 
Managed Service Provider 

5 

3 The Visibility You Need 

Twenty-four hours a day. seven days a week 
rcty on ScntinclfX to display your high- 
j priority networks, systems, devices and 

- graphs. Easy to instill and configure, you 
can be taking advantage of Sentinel/X in your 
environment in minutes. With Sentincl/X you 
are assured that your most important 

~y management screens arc presented and 

available without "drill-downs", right-clicks 
or any additional actions. Scntincl/X is an 

} essential tool for any NOC. Data Center or 

Managed Service Provider. 

J Compatibility with Your 

Management Applications 

Beyond compatibility with leading 
management frameworks such as Open View 
i_ Network Node Manager and IT'Operations, 

■j Sentinel/X is also compatible with hundreds 

of integrated and stand-alone management 
products such as CrscoWorks and Optivity. 
^ Scntinel/X assures investment protection 

— across multiple versions of your 
applications. 

Platforms Supported 

HPUX 10.x. Solaris 2.x 

To receive an evaluation copy of Sentinel/X 
please visit www.inotech.com 

For More Information, 
Contact InoTech at 800-lnoTech (466-8324) 
or email at sentinelx@inotech.com 
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subcontract with other TCO mem- 
bers to handle deployment and sup- 
port in their respective geographic 
regions. 

"With the TCO, I can put 50 engi- 
neers on the street |for a customer 
deployment] in a week," Botti says. "I 
couldn't do that with just my own 
company's resources." 

Such thin-client setups require a dif- 
ferent way of thinking about corpo- 
rate networks. Customers must 
license software differently, some 
applications have to be tweaked, and 



LAN and WAN band- 
width may need to be 
increased. 

In the past, customers 
have often turned to 
the biggest integrators, 
such as EDS or KPMG, 
for help with such pro- 
jects. 

But these companies 
typically lack thin-client 
expertise, Botti says, and 
often subcontract such 
projects to companies 
like his own. 

The TCO plans to part- 
ner with larger integrators to make- 
such subcontracting easier. 

The 10 charter TCO members 
claim to have a total of 2,900 cus- 
tomer deployments and an estimated 
" 7 40,000 thin-client users. 

The TCO is encouraging other inte- 
grators to join the group and plans to 
set up an evaluation process for new 
thin-client products and technologies. 
Those passing muster will be certified 
by the TCO. 

For more information on the group, 
go to www.thinclientorg.com. \i 



Policy routers police net access, security 



Internet Devices eases remote access mgmt., adds IP Security. 



BY TIM GREENE 

SUNNYVALE, CALIF. — Internet 
Devices has four new routers that 
enable network executives to control 
access to enterprise resources based 
on user profiles. 

Fort Knox Policy Router CE routers 
can be used to control network access 
based on time of day, as well as by lim- 
iting certain users to specific applica- 
tions and subnets. 

The routers allow or deny access 
after checking a policy server also 
available from Internet Devices. 
Management software enables differ- 
ent levels of IT managers to set policies 
for the end users or departments they 
oversee. 

In addition to enforcing policies, the 
policy routers can encrypt traffic 
between sites using IP Security tech- 
nology. 

The Fort Knox gear stands apart 
from other policy routers because of 
its focus on security, says Dave Kosiur, 
an analyst with the Burton Group in 
Midvale, Utah. Products from compet- 



ing vendors, such as Cisco and Nortel 
Networks, are more focused on quality 
of service, he says. 

Kosiur also says Internet Devices' 
software for managing user access 
offers features that other products 
lack, such as a simple way to grant 
groups of users a single set of access 
rights even if the users are located at 
many different sites on a network. 

The smallest of the routers has two 
10/100M bit/sec Ethernet ports, one to 
connect to the LAN and one to con- 
nect to the WAN router. 

The three other routers have three 
ports each; the third port connects to 
devices in a demilitarized zone 
between firewalls. The Internet 
Devices routers also van' in processing 
power. 

The routers range in price from 
about $2,000 to $18,000. The policy 
server comes in two models that cost 
$15,000 and $25,000. The policy man- 
agement software costs $400 to $ 1 ,000 
depending on the number of routers 
being managed. 

Internet Devices: (408) 541-1400 
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Wired Windows . Dave Kearns 

Hunting for directory apps 



Alarger-than-usual number of 
you will be reading this on an 
airplane, winging your way toward 
Las Vegas for NetWorld+Interop 99. 



This could be a very exciting show, 
especially for those of us who have 
been hunting high and low for appli- 
cations that effectively leverage direc- 



tory services. 

The big hardware folks have already 
weighed in with their offerings as have 
the directory management vendors. 
Now it's time for other software houses 
to directory-enable their products. 

As just one example, venerable 
speech processing company Dragon 




You wouldn't fly 
across the Atlantic in a 
single engine jumbo jet, why send all 
your customers to a web site running 
on a single server? 
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the reliability of a 747 to transport the millions of 
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each hour. 

While web hosiers and server vendors offer 99% or 
better availability, their systems still fail. The result - 
customers and revenue are lost as seconds fly by and 
network managers scramble to explain to their 
CEOs why so much was riding on a single server. 

This is why network administrators at some of the 
highest profile sites made the move to HolonTech. 
It's simply the highest performance, most secure, and 
easiest to implement Internet clustering and load 
balancing solution on the market. 
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Systems has announced (and is just 
about ready to ship) a directory-enabled 
version of its flagship Dragon 
NaturallySpeaking software.This speech 
recognition software has been used for 
years to improve productivity and 
speed in a variety of applications, 
including e-mail packages, forms entry 
and natural language search programs, 
medical and legal record systems, and 
corporate groupwarc applications. 

The new directory-enabled Dragon 
NaturallySpeaking Enterprise software 
lets a network administrator install and 
manage Dragon NaturallySpeaking soft- 
ware from a central location. You can 
use the new Administrator Workbench 
CO create and delete users, and update 
Vocabularies and speech commands 
NaturallySpeaking Enterprise requires 
a network that provides directory ser- 
vice to Windows clients, including 
Windows 2000 (with Active Directory) 
and NetWare (with Novell Directory 
Services). 

Speech tiles and speech commands 
are stored on the server Iscrs can log 
on from any PC on the network and 
use or modify their speech files and 
commands Portable PC users can COpy 
their speech files to their local drives, 
alter the files while disconnected from 
the network and then rcsynchroni/.c 
when reconnected to the network. 

Applications such as Naturally- 
Speaking Enterprise can help you sell 
the benefits of the directory to the 
skeptics in your enterprise. These are 
the products that make digital identity 
a reality — no matter where you arc. 
anywhere on the network or even 
remotely connected — the applica- 
tions look and feel the same while opti- 
mizing themselves for your location 
and the client hardware you're using. 

Kearns. a former network athninls- 
trtitor, is a freelance wilier ami con- 
sultant In Austin, Texas. He can be 
reached at uireitiiiyuill.com. 

Dave Kearns' column was omitted two 
weeks ago due to a printer's error. 
Kearns' column runs every two weeks. 
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A must see at Net 
World*lnterop is Server- l^f I i 
Magic 3, from PowerQuest. 
in the Novell Partners booth. This version 
allows server technicians to dynamically 
move, copy and fully resize NetWare 
and NT Server partitions, as well as resize 
and manipulate NetWare volume seg- 
ments on the fly. Get the details at 
www.powerquest.com/server magic. 
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Infrastructure Special Focus 



Gigabit Ethernet ventures into 
the land beyond the LAN 



BY JEFF CARUSO 

Users arc starting to get into Gigabit Ethernet 
for the long haul — literally. 
As Gigabit Ethernet picks up momentum 
in enterprise LANs, it is also extending to 
metropolitan-area networks (MAN), connect- 
ing buildings or campuses scattered through 
out a city. Enterprise users cite the technology's 
low cost and familiarity as primary reasons for 
implementing Gigabit Ethernet across MANs and 
even WANs. 

The Gigabit Ethernet specification allows 
the technology to stretch 5 kilometers from 
one switch to another, though sources say 
standard Gigabit Ethernet can actually reach 
about 10 kilometers with more powerful 
optics than those specified in the standard. 
With proprietary hardware and high-quality 
fiber-optic lines, some vendors claim to 
extend the technology's reach up to 70 kilo- 
meters and farther. 

As early work on a 10-Gigabit Ethernet 
standard gets underway, vendors are pushing 
for the standard to include specifications 
supporting MAN and WAN links. At the IEEE's 
call for interest on 10-Gigabit Ethernet in 
March, vendors acknowledged the need for 
the technology in LAN backbones but indi- 
cated that it also has to have a future over 
long distances. 

In the meantime, companies lucky enough 
to have access to dark fiber — that is, fiber-optic lines 
that have been installed but are not carrying signals 
— can run Gigabit Ethernet between sites as a back- 
bone network technology. One example is Harris 
Corp., which wanted to connect its Electronic 
Systems Sector (ESS) business with the main head- 
quarters across town in Melbourne, Fla. The 5,000 
users at ESS would run financial, e-mail and Internet 
applications over the link to headquarters. 

Though Harris' bandwidth requirements weren't 
high, the low price of Gigabit Ethernet gear was 
compelling. "It was $35, 0(H) for the whole thing," 
says Mike Oyler, systems engineer at ESS, which set- 
tled on equipment from Foundry Networks. He adds 
that Fast Ethernet probably would have been even 
less expensive, but he wanted to ensure the network 
wouldn't have to be upgraded for a long time. "Why 
worry about the future?" he says. 

Without Gigabit Ethernet services from carriers, 
users will have to find dark fiber. Carriers usually 
resell dark fiber, but unfortunately, dark fiber is not 
available everywhere. 

"We can't get dark fiber from here to our new 
facility, which is 10 miles away," says Marsha 
Klapperman, senior network engineer at Network 
Appliance in Redwood City, Calif. The company 
wants to connect the buildings primarily to conduct 
file transfers using Network Appliance's network 



HIGH-SPEED TECHNOLOGY 

Gigabit Ethernet is seen as 
an alternative to FDDI and 
ATM in some MAN and WAN 
environments. 



Going the distance 



The distance Gigabit Ethernet can reach varies widely, depending 
on the medium over which it travels. Sources say Gigabit Ethernet 
can reach these distances: 



Medium 



Standard 



Reach 



Coaxial cab e 



1000BaseCX 25 meters 



Caterory5 UTP copper cable lOOOBase T 100 meters 



Multimode fiber 



lOOOBase SX 1 kilometer 
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lOOOBase LX 10 kilometers 



Single mode fiber 



Proprietary Up to 70 kilometers 



storage devices. 

Instead of utilizing a gigabit per second, Network 
Appliance will have to throttle down its connection 
to OC-3 (155M bit/sec) or DS-3 (45M bit/sec) over 
the 10-mile span, Klapperman says. 

Carriers, however, are also looking into Gigabit 
Ethernet for offering services over long distances 
(.VttT April 12, page 1 ). Companies that arc interested 
Include Ameritech, Bell Atlantic. BellSouth and SBC 
Communications. 

Gigabit Ethernet and ATM 

Gigabit Ethernet joins other network technologies 
still widely used in the MAN, such as FDDI and ATM. 

Gigabit Ethernet owes its popularity to the market 
dominance of its fellow Ethernet technologies. 
Because vendors sell much more Ethernet and Fast 
Ethernet equipment than token-ring or FDDI gear, 
Gigabit Ethernet is becoming popular because it is a 
similar technology. Because so many vendors are 
making Gigabit Ethernet equipment, competition is 
pushing down prices.Thcse factors also apply in the 
MAN, so Gigabit Ethernet's popularity is spilling over 
into MAN environments. 

To its disadvantage. Gigabit Ethernet doesn't have 
the resilience of other technologies used in this area. 

"It's not a terribly fault-tolerant technology," says 
Man- Petrosky, an independent technology analyst in 



San Mateo, Calif. ATM was built to travel over long 
distances and withstand adverse conditions. ATM 
was also built to carry real-time traffic, such as voice 
and video. 

Time-critical applications really require ATM, says 
Tim Price, an assistant network administrator at the 
U.S. Army's Redstone Arsenal in Huntsville, Ala. 
Redstone conducts weapons tests with pieces of 
equipment in different locations. To stay synchro- 
nized, the equipment uses ATM, Price says. 

However, the arsenal uses Gigabit Ethernet over 
long distances. The installation is spread out 
over 10 kilometers, and Gigabit Ethernet car- 
ries the installation's more conventional LAN 
applications, such as e-mail. "We couldn't run 
ATM to everything," Price says. "It's just too 
expensive." 

Others rely on Gigabit Ethernet, even for 
supporting video traffic. The MAN connect- 
ing educational institutions in Spokane, 
Wash., runs video over Gigabit Ethernet by 
applying quality-of-scrvicc controls to the 
traffic (NW, July 20. 1998, page 60). Because 
video is given a higher priority than other 
traffic, it's guaranteed to get through when 
the links are overloaded. 

One big cost associated with Gigabit 
Ethernet over a MAN is in the fiber itself. The 
Spokane schools, for instance, spent four times 
as much on laying dark fiber than they did on 
Gigabit Ethernet equipment from Packet 
Engines. While pricing for Gigabit Ethernet 
services hasn't been set. current transparent LAN ser- 
vices cost anywhere from $750 to $2,000 per month. 

For the most part, the factors in deciding between 
using Gigabit Ethernet or ATM in the MAN are the 
same as the factors in deciding whether to use one 
transmission technology or the other in LAN back- 
bones. Users who care more about costs will often 
choose Gigabit Ethernet, and those who care more 
about real-lime traffic will often choose ATM. 

So many choices 

It is still undetermined which technology will 
prove more popular with users. Service providers 
are getting hit with many options when it comes to 
transporting data over the MAN and WAN, Petrosky 
says. In addition to Gigabit Ethernet and ATM, service 
providers can choose IP over SONET or Multi-proto- 
col Label Switching. Transparent LAN services pro- 
viding Ethernet, Fast Ethernet and FDDI in MANs arc- 
also available. 

Gigabit Ethernet is very much the newcomer to 
this environment. Most early enterprise adopters 
started testing Gigabit Ethernet gear in 1997, with 
implementations ramping up last year (>\'W, July 20, 
1998, page 1). 

"I have a feeling we're going to see some experi- 
mentation with Gigabit Ethernet," Petrosky says. 
"People will play with this and see what will fly." B 
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Question #6: Can the Net improve our net? 
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We need better direction 
to grow our business and 
increase our profitability 
using the Internet. 



AGREE - 

SOMEWHAT AGREE — 

NEITHER AGREE NOR DISAGREE - 

SOMEWHAT DISAGREE - 

DISAGREE - 
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e-bandwidth. 

Most communications companies selling e-commerce solutions have one problem, they've been around a while. 
So, their networks may lack the bandwidth to maximize your IT investments. We've got one of the world's fastest 
Internet Protocol (IP) networks, one with bandwidth to spare. Put your e-business into overdrive. Visit our Web 
site at qwest.com for the bandwidth to change everything. 
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Briefs 



Qwest last week named Afshin 
Mohebbi as president and chief 
operating officer. Mohebbi is 
British Telecommunications' 
president and managing director 
for United Kingdom markets. He 
will start at Qwest June 1. At that 
time, Qwest Chairman and CEO 
Joseph Nacchio will be freed to 
spend more time focusing on 
overall corporate performance, 
long-term strategy, technology 
and corporate development, 
Qwest says. Mohebbi will man- 
age Qwest operations, including 
competitive business units, net- 
work engineering, and operations 
and information technology. 

The California Public Utilities 
Commission has decided to ask 
the Federal Communications 
Commission for permission to 
implement "service-specific over- 
lay area codes" — such as one 
for cellular and personal commu- 
nications services numbers — 
which would serve the same geo- 
graphic areas as existing area 
codes for landline numbers. 

States must get federal 
waivers because the FCC banned 
service-specific area codes sev- 
eral years ago. The California 
commission is making its request 
because of a possible shortage of 
numbers in 20 of the state's 24 
current area codes I WW. April 19, 
page 61. 

MCI WorldCom and Sprint have 
expanded their international ATM 
services. For its major European 
markets, MCI WorldCom launched 
ATM Plus, a service under which 
the carrier manages the customer 
premises equipment 

Sprint's international venture. 
Global One, expanded its Global 
ATM service to 40 countries. 

In addition to numerous 
European and Asian markets, the 
service is now available in 
Brazil, Chile, Colombia, Vene- 
zuela and Mexico. 
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RBOC termination penalties challenged 

CLECs claim incumbent earner's effectively bar competition by locking users into long-term deals. 



BY DAVID ROHDE 

WASHINGTON, DC. — Users who'd 
like to change local service providers 
before their current contracts expire may 
get a break as a result of a growing move- 
ment to throw out dominant local carri- 
ers' termination penalties. 

Spearheaded by a little-known compet- 
itive local exchange carrier (CLEC) — 
KMC Telecom in Bedminster, N.J. — the 
movement's goal is to get state regulators 
to alter or ban the heavy financial penal- 
ties that regional Bell operating compa- 
nies often charge users if they leave 
before their multiyear contracts are up. 

Last month, KMC filed a petition with 
the Federal Communications Commission 
to ban RBOC termination penalties 
nationally and establish a period wherein 
users could move penalty-free to alterna- 
tive carriers. 

Bui the idea faces an uphill battle. So 



far, only one state, Ohio, is known to 
have granted even a temporary period 
during which users could escape RBOC 
termination penalties to move to a 
CLEC. And the CLECs' natural allies in 
regulatory battles — long-distance carri- 
ers who are also invading the local mar- 
ket — could be less inclined to fight. 'Hie 
reason: They use exactly the same type 
of termination penalties for their long- 
distance user contracts. 

KMC has built fiber rings in 23 so-called 
"third-tier" cities — those with popula- 
tions of less than 750,000. Mike Duke, the 
carrier's director of regulatory affairs, says 
because KMC is often the first CLEC avail- 
able in these towns, many of the best cus- 
tomers have already signed long-term con- 
tracts with the dominant carrier to get a 
price break. When those users try to get 
out of the contract, the dominant carrier 
says they must pay 50% to 100% of the 
See KMC, page 42 



Barrier to market entry? 

Some competitive local exchange 
carriers are finding ways to garner 
revenue despite incumbent carriers' 
termination clauses. 
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Iridium woes cast a shadow over satellite services 



BY DAVID ROHDE 

WASHINGTON, D.C — Emerging glob- 
al satellite voice and data providers last 
week were scrambling to distance them- 
selves from market pioneer. Iridium World 
Communications, after Iridium reported 
disastrous financial results and endured 
predictions of its eventual demise. 

Iridium, a constellation of 66 satellites 
that provides global calling and paging 
using a single handset, announced a first- 
quarter loss of $505 million on revenue 
of just $1,451 ,000. Even more ominous, 
the company said it had signed up 
10,294 customers, a far cry from the 
100.000 customers Iridium had 
promised lenders and investors it would 
have by now, and light-years from the 
500,000 to 600,000 the company admits 
it needs to break even. 

Iridium's results — closely accompa- 
nied by the recent resignation of its CEO 
and chief financial officer and a class- 
action shareholder lawsuit — called into 
question the whole market for low-earth 
orbit (LEO) satellite systems. Under 
these systems, providers launch groups 
of satellites into orbit 500 to 1,500 miles 
above ground level, and the satellites 



hand off voice and data traffic to one 
another until one of the satellites sees 
the terminating party below. 

Experts say Iridium has made two big 
mistakes. First, the company's service is 
costly — the handsets cost around 
$3,000 and airtime is $3 to $7 per 
minute. Iridium marketing officials have 
tried to position the service to compete 



No customers, no revenue 

Iridium's failure to convince many 
people to use its uftraexpensive calling 
service is taking its toll in red ink: 
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Iridium's 
losses (in millions) 



with expensive international toll calls, 
but analysts say users continue to view it 
as an alternative to cellular or personal 
communications services (PCS). 
"Despite Iridium's numerous protesta- 
tions to the contrary, its service does in 
fact compete with the services offered 
by terrestrial wireless networks," says a 
report by Current Analysis, an online ser- 
vice in -Sterling, Va. 

Second, Iridium has admitted that 
many of its distributors have been 
unable to gear up to sell the service. 

Iridium's troubles provide an opening 
for LEO competitor Globalstar. 

Globalstar — which will begin service 
by September after 32 of its planned 48 
satellites are launched and tested — uses 
a handset that first attempts to complete 
a call using ordinary cellular or PCS, 
explains spokesman Mac Jeffery. It then 
rolls over to the satellite network if the 
party can't be reached. 

Because Globalstar will be sold by 
experienced wireless providers, such as 
Air'I'ouch and Vodafone, who also hold 
equity stakes in the venture, the service 
should be marketed effectively, Jeffery 
says. Globalstar is expected to carry a 
See Iridium, page 42 
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KMC, 

continued trom page 39 

contracted service for the remaining 
months. 

"We face this in even' market we go 
into," Duke says. This especially occurs 
when users huy ISDN, SONET or 
Centres services, and in almost all ISP 
contracts. 

One potential KMC customer. 
Network Tallahassee, the largest inde- 
pendent ISP in Florida's state capital, tes- 
tified in March before the Florida Public 
Service Commission that Sprint's early 
termination penalties were forcing the 
company to stay put. Sprint is the domi- 
nant local carrier in Tallahassee. 

"We pay Sprint about half a million 
dollars per year," says Ed Perrine, 
Network Tallahassee's chief operating 
officer. After one year of a three-year 
contract. Sprint requires a kill fee of half 
the remaining term of the contract. 

Network Tallahassee wanted the 
option to switch simply because the 
company wanted to tell customers that 
it uses two different carriers' SONET 
rings "! didn't go shopping because we 
were unhappy with our current ser- 
vice provider," Perrine says. "I went 
shopping seeking redundancy." 

The Florida commission is consider- 
ing the matter, but only one of the five 
commissioners backs the principle of 
allowing firms the option of switching 
local service providers. 

One of the others is opposed. "He 
felt very strongly that a contract is a 
contract and the state has no business 
going in and messing with it after- 
ward." Perrine says. 

A similar debate took place in Ohio 
in 1997. There, the state commission 
granted a six-month period called 
"Fresh Look." during which customers 
in some cities could move to CLECs 
without penalty. Koughly 2(H) users 
reportedly contacted Amcritcch about 



Iridium, 

continued from page 39 

retail airtime rate of 85 cents to $1.25 
per minute because of a simpler satel- 
lite design. 

Many users will probably pass on 
these offers and wait for the arrival of 
Tclcdcsic. a 288-satcllilc network that 
will focus on broadband Internet 
access rather than phone calls. A 
Teledesic spokesman rejects any con- 
nection between his project — origi- 
nally backed by Bill Ciates and Craig 
McCaw — and Iridium's woes. 

"Ieledesic's broadband service is 
the satellite equivalent of fiber-optic 
access, while Iridium is a narrowband 
voice service comparable to terrestrial 
cellular service," the spokesman says. 
Still, Teledesic has yet to launch any 
satellites and is not expected to be 
operational until 2003. B 



moving during the period, says an 
Amcritcch spokesman. 

"We oppose regulators interfering 
with negotiated contracts," the 
spokesman says. "That's what we 
believe they were doing with Fresh 
Look." Fresh Look is no longer available 
in Ohio. It has been considered or 



requested by CLECs in Indiana, 
Michigan and Wisconsin. Louisiana and 
North Carolina have rejected the idea 
after similar petitions, while Alabama 
and Kansas have opened proceedings 
on the matter. 

Dominant carriers could solve the 
problem by changing the penalties to 



something less onerous, Duke saj J h >r 
example: If a user leaves a thrcc-ycar 
contract after one year, the payments 
already made could be adjusted 
upward to the lesser discount level 
usually available on shorter contracts, 
but the user would not have to pay for 
future usage. 3 



How a bundle of our new 
can prevent a boatload 



Now combined in one easy 
solution: APC Smart-UPS" power 
protection and an APC NetShelter* 
rack enclosure. 

When you install your new IBM, 
Compaq, HP or Dell server, demand 
that the award-winning APC 
Smart-UPS and APC NetShelter 
bundle be part of the solution. 

According to Contingency Planning 
Research, power failure and surges 
account for 45% of all data loss. In 
high availability environments, 
that's unacceptable risk. 

Why not give yourself a break? Bad 
power should be the last thing you 
have to worry about. 

Let the power of two work for you. 
Call your local reseller today and 
ask for your NetShelter/Smart-UPS 
single, dual or triple server bundle. 



"/ knew from firsthand experience that APC 
was the best UPS company in the business, 
and there was no hesitation in my mind as to 
who would protect our servers. " 

Howard Forrester. President 
Forrester Consulting Group 



Simple 

• Shipped pre-assembled 

• Free inside delivery" 
■ Saves floor space 

• Eliminates cabling 
"rat's nest" 

• Automatic voltage 
regulation and 
proactive environ- 
mental monitoring 

• PowerChute" plus 
software makes both 
local and remote 
power management 
easy 



* All enclosures are shipped F.O.B. 
APC provides FREE mude delivery at 
no extra charge v. it recommended 
carrier. Urtrtod Van Line* 



Smart-UPS RM 1400 VA plus 
NetShelter 42U rack 
ART 200 




$2,995 




APC's New Power Array 



Provides you with the total datacenter 
protection you need 



The Symmetra" Power Array" combines with the 
complete line of APC datacenter protection software 
and accessories to provide the four most critical 
elements of total datacenter protection: redundancy, 
scalability, manageability and serviceability 



Q§£ FREE Netshelter Configurator Software! 

Visit http://promo.apcc.com key code j936z,or Call 1.888.289.APCC x7565 Today! 
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FrameWatch keeps GTE honest 

BY TIM GREENE Services is offering a new frame relay provider's service-level promises. 

monitoring package that lets cus- GTE's FrameWatch service uses 
IRVING, TEXAS — GTE Network tomers keep an eye on the service monitoring probes at each custo- 



availability accessories 
of network problems 



Durable 



• Physically protects 
your server investment 

■ Bulletproofs your 
installations 

■ Limits wear and tear 
on components 

• Shields your network 
cards and disks with 
guaranteed surge 
suppression 

• Strong adjustable 
framework 

• $25,000 equipment 
protection guarantee 
with Smart-UPS 
(see policy; US and 
Canada only) 



Smart-UPS RM 2200 VA plus 
NetShelter 42U rack 
AR1205 




$3,550 



Flexible 



• Organizes your 
equipment 

■ Ample room for 
server, UPS and 
accessories 

• An easy fit for all 
leading server 
manufacturers 

■ Robust diagnostics 
solves problems 
before they happen 

• Accessory options 
include Roof-mount- 
ed fan tray, 17-inch 
keyboard. Cable 
Management Arm, 
sliding shelves and 
much more 



Smart-UPS RM 3000 VA plus 
NetShelter 42U rack 
AR1210 




$3,749 



Accessory options for centralized server protection 



• Roof mounted fan tray (AR8210) for 
proper ventilation 

■ SmartSlot Triple Chassis (AP9604) 
accommodates multiple APC SmartSlot 
adapters for Web/SNMP management, 
environmental monitoring, remote 
UPS management and other options 

■ MasterSwitch" (AP9210I remotely 
reboots servers and network equipment 
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• Cable management arm (AR8129) 
allows users to attach cables and 
power cords so they remain fixed 
and out of the way 

• 17 inch keyboard (AR8250) easily fits 
between the mounting rails of any 
NetShelter enclosure 



Legendary Reliability" 



mer site to determine availability, de- 
lay and usage of virtual circuits 
between sites. 

GTE presents this data to customers 
on a Web site that can be accessed via 
a browser. Customer reports are 
protected from prying eyes by digital 
certificates issued by GTE. The reports 
are updated twice per day with data 
that is coUected every five minutes, 
GTE says. 

That is an improvement over the stan- 
dard GTE method of delivering perfor- 
mance reports — monthly and on paper 
— says Michaele Pollard. WAN adminis- 
trator for Hillsborough County. Fla. She 
says the county's Information and 
Technologies Services Department now 



"FrameWatch 
could provide 
a point of 
reference for 



provisioning 
future circuits." 

Michaele Pollard, WAN manager, 
Hillsborough County, Fla. 

uses a managed GTE frame relay service. 
She is familiar with FrameWatch, but the 
county does not use it yet. 

In addition to keeping an eye on how 
well GTE is doing, such reports could 
help plan growth of the Hillsborough 
network, Pollard says. If traffic increases 
on a given circuit, the size of that circuit 
can be increased before it gets congest- 
ed. Or the reports might show that 
some connections have too much band- 
widUi for the traffic they bear. 

"FrameWatch could provide a point 
of reference for provisioning future 
circuits," Pollard says. "Maybe you'll 
find that 256K bit/sec is overkill for 
one circuit." 

Customers could buy the frame relay 
probes themselves and install them at 
each frame relay network site, but the 
service eliminates the need for cus- 
tomers to buy a centralized manage- 
ment platform to monitor the probes. 
Instead, GTE installs the probes and 
maintains them as well as gathers data 
for the reports. 

The FrameWatch service reports on 
faults found with frame relay connec- 
tions and on data delivery rates above 
and below the minimums guaranteed 
in service agreements. GTE uses 
FrameWatch Service Level Verifier 
System probes made by Paradyne. 

FrameWatch service costs $60 per 
month, and the customer either buys 
or leases the probes. FrameWatch is 
available now. 

GTE Network Services: (972) 718- 
5000 



Free Product info enter NWInfoXpress #53 online @ www.netvrorkworld.corn/infoxpress 
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Sawis builds business ISP savvy 

CEO Heintzelman reshapes company's services for the future. 



letworWoriri 




Sawis 
Communi- 
cations, a 
4-year-old 
ISP, is try- 
ing to become a service 
provider for business users 
— until late last year, 
Sawis' only customers 
were other ISPs. 

The company has added 
business services such as 
managed firewall and digi- 
tal subscriber line (DSL) 



Internet access, and shortly, 
will add a virtual private 
network (VPN) offering. 
The shift to a business user- 
oriented service company 
was sparked by two events: 
a new parent company 
and a new CEO. 

Privately held Bridge 
Information Systems 
acquired Sawis last 
month for an undisclosed 
figure. Little-known Bridge 
is a global service com- 



pany that offers 280,000 
customers detailed finan- 
cial information. In De- 
cember, 20-year communi- 
cations industry veteran 
Clyde Heintzelman joined 
Sawis as CEO and presi- 
dent. Heintzelman spent 
the majority of his career 
at Bell Atlantic, but most 
recently was the chief 
operating officer and pres- 
ident at Digex, a national 
ISP owned by Intermedia 



Communications. 

Heintzelman recently 
talked with Network 
World Senior Editor 
Denise Pappalardo about 
the future of Sawis. 

Why the shift from provid- 
ing only wholesale ISP ser- 
vices to providing business 
services? 

We have a lot of ISP cus- 
tomers on our network. My 
background [at Digex] has 
been in the business-focused 
ISP world, and that's a better 
place in terms of margins 
and quality of revenue. 
Sawis' executive staff has 
much success in providing 
premium business services, 
and that's what we're build- 
ing here. And because [third- 




party testing! rates Sawis' 
backbone as one of the 
best performing networks, 
it's easier to bring pre- 
mium services to business 
customers. 

Sawis has announced secu- 

See Sawis. page 46 



IXCs turn to wireless for local service options 

Sprint and MCI WorldCom spending more than $1 billion to acquire wireless broadband companies. 



BY DENISE 
PAPPALARDO 

Sprint and MCI WorldCom 
are investing more than 
$1 billion to acquire local 
wireless network providers 
that the carriers hope will 
boost their local and long- 
distance voice and data 
services. 

Last week, Sprint an- 
nounced plans to buy Video- 
tron USA and Transworid Tele- 
communications, two wireless 
service providers, which 
means Sprint has spent some 
$800 million to acquire four 
wireless companies since 
April. Sprint's two other acqui- 
sitions were People's Choice 
TV and American Telecasting. 

MCI WorldCom last month 
also announced plans to ac- 



People's Choice TV 
MCI WorldCom CA! Wireless 



quire CAI Wireless for $350 
million to $400 million. MCI 
WorldCom has yet to reveal 
the exact purchase price. 

These acquisitions are the 
most recent examples of 
how intcrexchange carriers 
(LXC) are paying big bucks 
to reach business users 
directly, rather than depend- 
ing on incumbent local 
exchange carrier (ILEC) net . 
works for that link. 

Carriers often promise lower 
cost services when they bypass 
traditional local-loop access, 
but whether those savings 
get passed along remains to 
be seen. 

As more carriers look for 
new ways to reach customers, 
business users can at least 
find more bundled local and 
long-distance voice, video and 



data services that could 
simplify billing and possibly 
lower costs. 

The benefits for Sprint 
and MCI: They avoid the 
political hurdles of dealing 
with the ILECs to reach their 
customers, and they get 
a network technology that 
arch rival AT&T and 
other competitors, such as 
Nextlink Communications, 
don't have. 

Sprint and MCI WorldCom 
are tapping into a relatively 
new area for traditional 
telecommunications pro- 
viders — Multipoint Multi- 
channel Distribution Service 
(MMDS). 

All five of the service 
providers that Sprint and 
MCI WorldCom are in the 
process of acquiring support 



MMDS networks, which oper- 
ate in the 2.5- to 2.7- 
GHz range. MMDS is fixed 
wireless technology like 
Local Multipoint Distribution 
Services, but MMDS is sup- 
porting traffic today where 
LMDS carriers haven't yet 
started constructing net- 
works. 

MMDS licenses were dis- 
tributed by the Federal 
Communications Commis- 
sion some 15 years ago with 
the idea that they would be 
used to offer asymmetric 
wireless cable television ser- 
vices. But that plan hasn't 
panned out. 

Many of the service pro- 
viders that have been ac- 
quired by Sprint and MCI 
WorldCom are not financially 
sound, hence they were 
looking to be bought. CAI 
Wireless, for instance, is just 
coming out of bankruptcy 
protection. 

The FCC has authorized 
two-way traffic in the MMDS 
frequencies in a handful of 
cities. Approval for two-way 
MMDS communications in 
some 500 additional cities 
is expected later this year, 
says Robert Rini, managing 
attorney at Rini, Coran & 
Lancellotta, a communica- 
tions law firm in Washington, 
D.C. that often works closely 



with the FCC. 

Sprint is aggressively going 
after MMDS providers to 
extend the reach of its In- 
tegrated On-demand Net- 
work (ION) service. ION is 
Sprint's service that carries 
everything from local and 
long-distance voice to In- 
ternet traffic. 

Although local service is an 
integral part of ION, Sprint 
doesn't have much of a local 
presence to offer business 
users. Sprint's competitors, 
such as MCI WorldCom, have 
also acquired some competi- 
tive local exchange carriers 
(CLEC) to locally reach its 
business customers. 

But MCI WorldCom's CLEC 
division still doesn't reach all 
of the IXC's customer base, 
which is why MCI WorldCom 
is acquiring CAI Wireless. 

Not alone 

Sprint and MCI WorldCom 
are not alone in their quest to 
bypass ILECs. Competitors 
such as AT&T and Nextlink 
have already made big moves 
in this area. 

AT&T already has cable 
television provider Tele- 
Communications, Inc. under 
its belt, which gives the 
company local access to mil- 
lions of customers. And the 
telecommunications giant is 
also trying to buy McdiaOne 
Group to further develop its 
local consumer strategy. To 
address business users, AT&T 
also has Teleport Commu- 
nications Group, one of 
the largest CLECs in the 
country. B 



Local-loop access options aren't cheap 

Sprint and MCI WorldCom are aggressively going after fixed wireless cable television companies. 
While all these deals are pending, here's what's on the table today: 



er Acquiree How much Prime areas of coverage 



Sprint 


Transworid Telecommunications 


$30 million 


Seattle; Columbus. Ohio 




Videotron USA 


$180 million 


San Francisco; San Jose 



American Telecasting $448 8 million Portland. Ore.; Denver; Las Vegas 



$151 million Phoenix; Detroit 

$350 million to $400 million New York; Philadelphia; Norfolk. Va. 
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Grow. 

And the backplane grows with you. 
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Your company is growing. And to 
keep your network one step ahead. 

the backplane must 
grow as well. Intel 
developed Scalable 
Stacking Technology 
which allows you to 




increase backplane capacity as 
network traffic increases. So adding 
an Intel" Express Switch to a stack 
increases the backplane by 2.1 Gbps. 
Two switches equal 4.2Gbps, three 
switches equal 6.3Gbps, and so on. 
You can even manage them all as a 



single device. It's yet another way Intel 
is helping you harness the power of 
your growing network. To find an Intel' 
Authorized Solution Provider, and 
for more details, visit us on the Web. 



intel.com/network/grow/ 



0 1999 Intel Corporation. All rights reserved. Intel is a registered trademark of Intel Corporation. 
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Savvis, 

continued (rom page 44 

rity services. What else are you com- 
ing out with to nab business users? 

We plan on offering bundled 
services. Services that not only 



include access routers and Border 
Gateway Protocol configurations, 
but also firewall servers, strong secu- 
rity and high-end routers. 

That's why Sawis teamed with 
Northpoint to bundle DSL Inter- 
net access and [virtual private net- 



work] services. 

But Savvis doesn't have a VPN ser- 
vice yet. When should customers ex- 
pect to hear more about that? 

VPNs are right on the horizon, and 
we should have more information 



within two months. 

Many of your competitors already 
have VPN services. How will your ser- 
vice, coming late to market, differenti- 
ate itself? 

We will offer users control over the 
quality of that VPN from end to end. We 
will also largely focus on specific mar- 
kets, vertical markets such as finance. 
We'll control the quality by keeping 
the traffic all on our own ATM-based 
network. 

Bridge acquired Savvis last month. 
How will this new parent benefit Sawis 
customers? 

We can easily marry Bridge's and 
Sawis' networks because we both use 
Cascade ATM switches. And Bridge is 
heavily focused internationally, where 
our network operations arc uniquely 
domestic. 

When you mash those two net- 
works together and bring Bridge's 
financial content and our distribu- 
tion capabilities to the table you 
have a strong combination of 
assets. Bridge is a company with more 
than $1 billion in revenue. As a 
result, there is more substance 
and financial strength by combining 
the two companies. We should also 
be able to lower our costs because 
we'll be able to buy fiber and 
equipment in larger quantities. 

Prior to Sawis' business service 
push, the company was best known 
for building what Savvis calls Pri- 
vate Network Access Points IP NAP) 
What advantage does this approach 
of exchanging Internet traffic give 
Sawis over competitors? 

Most of our customers' traffic only- 
makes one hop when traveling over 
Savvis' network. This allows our net- 
work to be rated lowest in latency. 
Our network design is unique 
because customers are never more 
than one or two hops away from their 
final destinations. 

How do you engineer that? 

Sawis peers with the three major 
national ISPs — UUNET, Cable & 
Wireless and Sprint — at each of its 
P-NAPs, in addition to peering with 
numerous smaller national ISPs. The 
big three ISPs reach more than 80% of 
all Web sites on the Internet. 

How many P-NAPs are set up right 
now? 

There are eight P-NAPs, and each 
has at least three DS-3 or three 
OC-3 connections to UUNET, Cable 
& Wireless and Sprint. We offer 
customers more access than they 
can get on their own because if 
they buy a T-l from us, they get 
high-bandwidth access to three 
major providers and also some 
smaller ISPs. H 



Enterprise-wide VPN from 

Real VIP customers. 



Skip the marketing hype. Ask your peers at VIP VPN DAY. 

Las Vegas, Booth 2468 




i Wednesday, May 12 
10:00 a.m. to 6:00 p.m. 

Networld+lnterop '99, 
Las Vegas Convention 
Center 

Booth 2468, North Hall 



The Compatible Systems IntraPort Family 
provides real VPN solutions for IT pros. 

If you've been waiting for Virtual Private Networking to be an 

"established" technology before you got serious about implementing 
it for your business, the wait is over. Come get the facts straight 
from leaders in the IT industry: 

SPEAKERS INCLUDE: 

■ Edward McCreight, Adobe Systems, Inc. 

■ David Bixler, Entex Information Systems, Inc. 

■ Michael Norris, The Hunter Fan Company 

■ Chris Gangwish, New Hope Communications, Inc. 

SEE THE VPN SOLUTIONS ALSO USED BY: 

■ Apple Computer 

■ NASA 

■ JPL 

■ Royal Caribbean Int'l 

■ CNA Insurance 

■ U.S. Dept of Health 

Also on May 12, in our booth # 2468, hear from leading industry ana- 
lysts: John Freeman, Principal Analyst, Enterprise Infrastructure Current 
Analysis and Jeff Wilson, Director of Access Programs, Infonetics. 

Find out how these companies have implemented VPN solutions from 
Compatible Systems for tremendous cost savings and faster access. 
Want the facts on VPN? Skip the marketing hype and ask your peers. 



Stop by our booth to register for your free technical evaluator's 
step-by-step guide to implementing VPN. 



Compatible Systems 

the VIRTUAL leader 



1.888.356.0283 | www.compatible.com/evaluate_now/ 



IntraPort. IntraPon Enterprise and IntraPort Caftier are trademarks of Compatible Systems Corp 
All .-.lie' product names are trademarks ol their respective manufacture's 



Free Product info enter NWInfoXpress #32 online @ i 
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Merging 



voice and data 



on the same 



ireless LA 



has everybody 
talkin 



Wasn't long ago wireless voice and wireless data were consid- 
ered about as separate, distinct and "unmixable" as apples and 
oranges. Then, Symbol leadership took charge. The same leader- 
ship that pioneered the first commercially successful spread spec- 
trum wireless LAN for transaction processing. The same leadership 
that, once again, takes wireless LAN technology to the next level - 
seamlessly merging voice over the same data network for a com- 
plete communications solution. We're talking about Spectrum24. 

Simply stated, Spectrum24 is Symbol wireless LAN technology 
at its innovative best. The experts at Network Computing agree. 
They selected Spectrum24 products as an "Editor's Choice" 
for best interoperability, ease of connectivity and network 
management. 

With Symbol's global network of Business Partners and 
Services Professionals to support you and our commitment to 
industry standards -including IEEE 802.11 and ITU H.323-you can 
maximize the value of your technology investments today and 
tomorrow. 

Find out how Symbol Spectrum24 is bearing fruit for 
Fortune 1000 companies worldwide 
and how it can do the same for yo 
Call 1-800-722-6234 or visit us o 
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Wan Monitor . Daniel Briere and Christine Heckart 

Hosted applications: Look before you leap 



So you think you're ready to 
deploy a network-hosted appli- 
cation? There are a few Application 
Service Providers (ASP) out there to 



take your business. But before you dash 
off that request for proposal (RFP), you 
better make sure you know exactly 
what you want. 



It's so early in the ASP process that 
many ASP service models are emerg- 
ing, and no one knows what is going to 
remain in the end. Some ASPs will exe- 




THIS IS YOUR DATA. 



THIS IS YOUR DATA IN OUR NEW 
DATACRYPTOR 2000. 



RACAL'S DATACRYPTOR™ 2000 

THE WORLD'S MOST ADVANCED 
TRIPLE-DES UNK ENCRYPTOR 





The DC2K link encryptor is designed to 
protect valuable data on your network by 
providing secure communications across a 
private or public network. 

When you compare the features of the 
DC2K to its competitors you'll see that no 
other link encryptor offers you the benefits 
of strong security, choice of algorithms, 
SHMP manageability, and protection from 
obsolescence at any price. 

■ Secure Data Communications 

■ DES, 3DES, Skipjack and 
Other Algorithms 

• X.S09 Certificate Based 
Public Key Management 

■ Compatible with SNMP Managers 

• Secure Remote Configuration 

■ Electronically Loadable 
Algorithms, Including National 
and Custom Algorithms, 
Preventing Obsolescence 

• Sealed Tamper-Evident Case with 
Two Zones of Physical Security 

• Comprehensive Diagnostic Testing 

■ Secure Link Element Manager for 
Windows 9b and NT Using PPP 

• Year 2000 Compliant 

■ Designed to Comply with FIPS 140-1 
Level 3 and ITSEC Level E3 

NOW take advantage of our 

SPECIAL OFFER: 

Turn in your existing encryptor and 
receive up to *1000 rebate toward 
the purchase of a new DC2KI 

To find out more call: 
1-888-744-4976 or 1-954-846-4700 



cute on more than one service model. 

For example, some ASPs focus on soft- 
ware delivery over the network pro- 
viding off-the-shelf software delivered 
online and hosted on the network. In 
theory, this means you won't have to 
store 100 mill ion lines of code on your 
desktop. Some providers, such as 
USinterworking, will provide enterprise 
resource planning applications, such as 
SAP's R3 or PeopleSoft, from a network- 
hosted platform. Other ASPs, such as 
MTT in Nova Scotia, will deliver basic 
software, such as word processing and 
spreadsheet applications, over the 'Net. 

In the short term, this service model 
may suffer because most software has 
not been written for this type of envi- 
ronment. This is especially true for 
business software such as Microsoft 
Word, Excel and PowerPoint. Java- 
based programs have the advantage 
here, but as the market grows, many 
independent software vendors will 
help to rewrite current software. The 
beauty of this service model is you 
don't have to worry about software 
licensing and management, upgrades, 
revisions and so forth: That is handled 
as part of your service. 

A variant on this service model is the 
management of software revisions and 
updates. In this model, you'll still have a 
software resident on your desktop; 
however, software revisions and bug 
fixes are managed by the service 
provider and downloaded from the net- 
work. If your business is short on MIS 
resources and managing desktop appli- 
cations is not the top priority, then a 
service such as this could be appropri- 
ate. Your MIS people can then focus on 
more important, strategic projects. 

Another variant on this service model 
is the development of customized appli- 
cations to solve specific business prob- 
lems for specific industries. These ASPs 
art- likely to emerge out of the vertical 
industries they serve. 

Some service providers will be in 
the business of helping the would-be 
ASP get into the industry. We see this 
being a great opportunity for today's 
facilities-based carriers. They don't 
have to know each specific industry or 
compete with ASPs on a niche basis. 
Instead, the ASP becomes a sales chan- 
nel for their backbone services. 

Given this broad spectrum of pro- 
vider types, expect to send your Rl'Ps 
to a lot of people who will come back 
with many different offerings. This is 
not going to be an easy apples-to- 
apples comparison because of the lack 
of uniform definitions, terms and 
processes. So if you are going to buy, 
expect to spend a lot of extra time 
defining what you want. 

Briere is ftresident and Heckart is 
vice president of the TeleCbuice con- 
sultancy in Boston. Tbey can be 
reached at dbrlere@telecboice.com 
and checkart@telecboice.com. 



Racal Security & Payments 

LINK TO A SECURE FUTURE 

Racal. Racal Security & Payments and Dalacryptor 2000 (DC2K) are trademarks of Racal Electronics Pic C-1999 All rights reserved. 2/99 PBA 1824 
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THE EPSON DFX-8500 



VS 



MTBF 10000 hours.* 
The equivalent of only 4 years 
and 9 months worth 
of 40 hour weeks 
of solid printing. 




_ 
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THE NEW OKIDATA PACEMARK 4410 
RELIABLE HIGH SPEED FORMS PRINTER 



MTBF 15000 hours.* 
The equivalent of 7 years 
and 3 months worth 
of 40 hour weeks 
of solid printing. 



If the name of the game is reliability, 
the name of the printer is Pacemark 4410. 



Basically, you can depend on the 4410 not to let you down. 

We engineered it to stand up to virtually anything your tough- 
est department can throw at it. 

Its MTBF is 15,000 hours. The equivalent of 7 years and 3 
months worth of 40 hour weeks of solid printing. (The Epson's 
MTBF is only 10,000 hours.) The Pacemark 4410 is rated for a 
workload of 35,000 pages per month, at 300 lines per minute. 
Seven years and 3 months times twelve months times 35,000 
pages per month comes to 3,045,000 pages before failure. Our 
warranty is twice that of the Epson: 2 years on site for the print- 
er, and 1 year on site for the printhead. 

The 4-time Computer Reseller News Channel Champ brings 
you the only printer in its class that prints 10 part forms, not just 



7. Which also means the latter pages in 7-part forms are a lot 
sharper than its competition's. 

This is the perfect printer for all your toughest jobs, including 
monthly financial reports, and huge label runs. Our industry- 
leading technical and sales support includes self-paced training 
programs, free literature, joint sales calls, toll-free "7/24" service 
hotlines, and much more. Call 1-800-OKIDATA or visit our 
Website: www.okidata.com 



OKI' 

People to People Technology ' 




'Based on testing, actual results may van/. O 1999 Okidata. a Division ol OKI Amenca, Inc OKI, Reg. T M-. M O . M R , Peopte to People Technology and destgn TM . Oki Electnc Industn/ Co , Ltd PACEMARK, Reg TM M D . M R , Oki America, Inc 
Epson, Reg TM., Seiko Epson Corp Alt specifications from respective company's product data sheets and web sites 
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Alcatel brings over a century of innovation to the Internet. We are the global leader 
in undersea, fiber-optic cables that connect continents and transport Internet 

traffic worldwide. And we hold the number one position in DSL — Internet access technology 
that's 200 times faster than traditional modems. 



And now, with Xylan, Assured Access and Packet Engines, we offer the most 

advanced IP technologies in the world. Providing you the fastest, most reliable 
network solutions for the Internet revolution. 



See us at NetWorlri + Interop 



at fgoQTH 44B^ 



^xylan 

AN AlCMIl COMMMV 



PACKET EN G I N E S 

Am Atom Co.pt.T 



ALCATEL BUILDS NEXT-GENERATION NETWORKS, DELIVERING 
INTEGRATED END-TO-END DATA AND VOICE COMMUNICATIONS SOLUTIONS 
TO ESTABLISHED AND NEW CARRIERS, AS WELL AS TO ENTERPRISES AND 
CONSUMERS WORLDWIDE. WITH 1 20,000 EMPLOYEES AND SALES OF 
$25 BILLION, ALCATEL OPERATES IN MORE THAN 130 COUNTRIES. 



ASSURED ACCESS 

An Aicam Co«p*ni 



www.usa.alcatel.com/internet 
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ActiveTouch last week 
launched WebEx Offices, a free 
Web-based service individuals 
can use for meetings with multi- 
ple co-workers and clients. 
WebEx Offices enables real-time 
collaboration through a standard 
browser, as well as instant mes- 
saging, meeting scheduling, 
message notification and con- 
tact address books at www. 
webex.com. 

ActiveTouch: 14081 980-5200 



Elron Software has shipped 
CommandView Message Inspec- 
tor, an IMT-based content inspec- 
tion tool for e-mail, newsgroups 
and File Transfer Protocol. It can 
filter out inappropriate material in 
order to meet corporate accept- 
able-use policies. CommandView 
Message Inspector starts at 
$1,195 for a 25-user license. 

Elron: 18001 406-5833 



SAP AG plans to build Exten- 
sible Markup Language (XML) 
into its enterprise resource plan- 
ning (ERP) applications by licens- 
ing technology from Web- 
Methods. Initially, SAP will use 
WebMethods' XML business-to- 
business IB2BI application to 
XML-enable its SAP R/3 and SAP 
B2B Procurement applications. 
WebMethods' B2B software uses 
XML to allow ERP applications, 
legacy data and Web sites to 
exchange data. 



Angara Database Systems 

has begun shipping its main 
memory database. The Angara 
Data Server is a relational data- 
base that uses RAM as its main 
data store, giving the database 
fast response times. The product 
is aimed at high-performance 
Web electronic commerce appli- 
cations. Price varies, and the 
software runs on Unix, Linux and 
Windows NT. 
Angara: 1888) 952-5200 



Applications 

Intranets, Messaging/Groupware, E-com m erce, 

^^^^ Security, Wetwork Management, Directories 

Management on the cheap 

Here are 10 network and systems management tools that are free (or awfully close to it). 




BY JEFF CARUSO 

Consider the simple, nearly 
ubiquitous utility called ping. 
It's a network manager's first 
reflex, the first tool in the toolbox. 

Need to know if a server is reachable 
over a network? Ping it. 

Ping, however, is just one of many 
useful and free management utilities 
readily available to network managers. 
In a large enterprise, such tools can 
be used to supplement commercial 
management tools and platforms. In 
a small environment, they may be all 
you have. 

It's surprising how much free stuff 
is available. In addition to utilities 
such as ping and traccroutc that ship 
with Unix and other operating systems, 
shareware and freeware management 
tools abound. Many network managers 
have grown frustrated with manage- 
ment software on the market; some 
have written their own quick tools to 
solve a problem and thrust them into 
the public domain. 



Should an organiza- 
tion trust its net- 
work to free tools? 
Strategies differ. Some 
managers use the tools 
in conjunction with 
major network man- 
agement software. 
Others use them as 
a backup system if the 
management platform 
fails. Still others 
depend on the tools 
everyday. 

"In the old days, tel- 
net. File Transfer Pro- 
tocol, ping and tracer- 
oute were about all 
you needed to keep a 
small IP network run- 
ning smoothly," says 
Mike Myrick, manager of network 
development and engineering services 
at the University of Mississippi. Over 
the past 20 years, the school has grown 
from a few hundred nodes to 13,400 
connections. 



etwork 

allaMillLHlt 




"Contrary to what 
you might think, 1 still 
rely heavily on these 
simple tools," Myrick 
says. He combines 
them with other free 
tools, such as Scotty 
and Multi Router Traffic 
Grapher (MRTG). 

"Using public do- 
main and home-grown 
management tools is 
cheap and easy on a 
small scale," says Deke 
Kassabian, technical 
director at the Uni- 
versity of Pennsylva- 
nia. "But once the 
scale gets large 
enough, there is a ten- 
dency to develop 
frameworks to use the tools together 
and to design common databases to 
help correlate their data. Real network 
management for large networks proba- 
bly can never be done cheaply." 

See Management, page 68 



I N - S 1 T E : Lessons from Leading Users 
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Managing the tightest ship in the shipping biz 



BY J li I- F CARUSO 

or UPS — a company thai has 
btlllt its reputation on speedy 
mm package delivery — spending 
I three months to distribute 
software within its 
own network was 
unacceptable. 

It used to take that long, 
but now 1 IPS can deliver 
software lo thousands of 
its PCs and servers in three 
lo five business days. 

To achieve this accelera- 
tion, Atlanta-based UPS last year 
installed a software distribution appli- 
cation fromTivoli as part of a manage- 
ment framework that includes software 
for remotely controlling and monitor- 
ing systems. 

I PS has made its move at a time 




when StxaUed "framework" manage- 
ment software from vendors such as 
T'ivoli and Computer Associates is 
coming under increasing lire for being 
expensive and difficult to 
implement. I'arl of the reason 
LIPS went with the software 
is that the company found 
that the software had a func- 
tion I 'PS could benefit from: 
software distribution. 

Previously, I IPS would 
update software across its 
1.2(H) sites via a huge sneakernet, says 
Gten Barry, project leader of the T'ivoli 
implementation at HI'S. 

"We would create more than I .000 
upgrade CDs, send them to regional 
tech support, and dispatch support 
people to each site." he says. 



The support people would install 
the in-housc software on Window s NT 
machines at each of the sites .The soft- 
ware helps UPS track the packages it 
ships around the country. 

Now software is distributed and 
installed electronically front a central 
data center ov er a frame relay net- 
work lo locations throughout the 
U.S. Tile company has p er fo rm ed 
more than 30.000 distributions since 
last August. 

While 1 PS won't say how much it 
is saving by using the T'ivoli software. 
Barn says, "We're happy with our 
return on investment " 

Tile implementation isn't perfect, 
however. UPS still needs to upgrade to 
the latest version of T'ivoli Enterprise to 
See UPS, page 60 
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You need to deploy 
business -critical applications 
to users around the world. 




Consider it done. 




FREE Server-based Computing white paper! 

See bow you can get fast, flexible and cost-effective 
application deployment. 
call 8B8.a15.a302 



Today, thousands of enterprises agree: 
server-based computing is a fast, flexible and 
cost-effective way to deploy business-critical 
applications to users around the world. 

With Citrix® server-based computing 
software, you can deliver the latest HR, 
customer billing, ERP, personal productivity 
or other applications to multiple locations, 
regardless of client hardware. And since it 
can be done in hours instead of weeks, 
Citrix is an excellent solution for deploying 
Y2K-compliant applications. Which means 
you save money and increase productivity 
because now, everyone in your organization 
can access any application, anywhere, anytime. 

To learn how you can make everything 
in your enterprise compute, get your FREE 
Server-based Computing white paper today. 

Now everything computes.^ 



CITRIX 



*5 t iipvnght fVO - IWt l.nnx Svscrmv, Inc. All right* rcscrvrd. Cant »a rrtUMerrd mdmuric and "Now rtrrvthinp t-iwrirmtcv" i\ J tradmuri nt Citnx System*. Iik. 
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Administrators in control with NT registry tool 



BY JOHN HON TAN A 

Microsoft's Windows 2000 Beta 3 
has finally made its entrance, but it's no 
secret that network administrators still 
need tools to get from here to there. 

One vendor has set out to pave that 
path with a tool to ease management of 
both NT and Windows 2000 desktops. 
The tool provides a central location for 
managing the registry on NT, and even- 
tually Windows 2000, desktops. 
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Eytcheson's Multi-Remote Registry Change 
allows administrators to make registry 
changes on networked NT desktops. 



Eytcheson Software has begun ship- 
ping Version 3 0 of its Multi-Remote 
Registry Change, a tool that allows 
administrators to enter changes from a 
central location to the registry keys on 
one or more networked NT desktops. 
The registry keys control desktop con- 
figuration information for both hard- 
ware and software components, in- 
cluding supported services and wallpa- 
per options. 

The tool also works with Windows 
2000 Beta 2 and Beta 3- 

The tool is a giant leap beyond 
RcgEdit32, the utility Microsoft includes 
with NT for remotely altering the reg- 
istry. RegEdit32 allows the same sort of 
remote controls as the Eytcheson tool, 
but network administrators can work 
on only one desktop at a time. 

"Multi-Remote Registry is a must- 
have tool. It cuts so much bull from my 
work* says Amnon Feiner, systems man- 
ager for Ladco Leasing in Thousand 
Oaks, Calif. "If you want to do desktop 
changes immediately, the way you do 
that is through the registry, and now I 
can centralize that work." 

Feiner says his company recently 
deployed a new intranet site and he 
needed to set it as the default home 



page on browsers installed on l(X) 
machines. "The process took 15 sec- 
onds using this tool," he says. 



Feiner also recently used Eytche- 
son's software to update the scheduler 
feature on 2,000 desktops networked 



over a WAN, completing the process in 
less than four minutes.Thc scheduler is 
used to run maintenance utilities on 
the desktop at set intervals. 

The newest version of Eytcheson's 
software includes the ability to change 
See Registry, page 64 
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Who's Doing a Number 
on Your Network. 




Control Security by Name and Number 
with Meta IP™ User-to-Address Mapping 



What users do to your network can be 
downright criminal You can positively 
identify the culprits with Meta IP and its 
unique User-to-Address Mapping service. 
UAM correlates dynamic address 
assignments with Windows NT and Ncvell 
login names So instead of 192.168.263.100 
causing a problem, you'll know right away 
it's Alice in HR. 

But Meta IP doesn't just solve problems It 
prevents them, by automating IP addressing 
and naming across large, multi-site 
networks Meta IP integrates DNS and 
DHCR synchronizes them via dynamic DNS 
updates and lets you manage all its services 
through a common interface You can extend 



automated, reliable addressing to every node 
without sacrificing user accountability 

In fact. Meta IP can make your entire network 
more secure, through its integration with 
Check Point FireWall-l* and VPN-T" Itletsyou 
implement security policies for dynamically 
addressed users You get the convenience 
of DHCR and your users get a single 
sign-on solution 

With Meta IP your users will stray less often 
And when they da you'll be able to quickly 
mend the error of their ways 

Download our free demo and investigate 
Meta IP for yourself. Call l-SOO-META-463 
or visit wwwmetaipcheckpomtcom. 



• Network Security 

• Traffic Control 

■ IP Address Management 

• OPSEC Alliance 

• Integrated Policy Management 



Check Point 

Software Tc-hnolosic* l.ul. 




01999 Chwft P°"f 

l!«]M>iuih* at 
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Microsoft's XML strategy generates doubts, ire 



BY ELLEN MESS.MER 



NEW YORK — Critics contend that 



Microsoft is trying to pollute Ex- 
tensible Markup Language (XML) the 
same way it polluted Java. 



Microsoft's electronic commerce- 
strategy is largely based on its vision of 
XML, one that's a bit different from those 
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with LANCAST CenturyStack™ 8100 Hubs 



Looking for flexible connectivity that's affordable? 

Then STACK IT with LANCAST CenturyStack 8100 
Series Hubs. Not only do you get the performance 
LANCAST products are famous for, you get the perfect 
plug-and-play solution for your Ethernet and Fast 
Ethernet LANs. It's also perfectly scalable. You can 
stack up to four unmanaged CenturyStack hubs for 
a maximum of 64 ports and up to six managed 
CenturyStack hubs for a total of 144 ports. And all 
ports are 10/100 Mbps auto-sensing. An internal 
switch module allows 10 and 100 Mbps domains 
to communicate and only one module is required 
per stack. Plus the CenturyStack Managed hubs are 
managable via a web-browser, SNMP, Telnet and 
local management. To learn more about our products 
visit www.lancast.com or call 1-877-LANCAST. 



Stackable high performance dual- 
speed connectivity for workgroups 
and small office LANs 




LANCAST 



12 Murphy Drive, Nashua, NH 03062 
www.lancast.com 



LANCAST and the LANCAS1 logo are regrstered trademarks and CenturyStack is a trademark of LANCAST, Inc. 
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who believe in today's XML standard 

The company unveiled its grand 
e-commerce plan in March,. in initiative 
squarely centered on biz Talk, the XML- 
based application middleware. 8CTVCT 
and tools it plans to make available in 
early release- around July. 

As described by Microsoft. BizTalk s 
XML components will let trading part- 
ners easily tie business data from Web- 
based purchase orders into enterprise 
resource management systems or back- 
end databases — the process known as 
supply-chain management. Microsoft 



Add Microsoft to the list 

Messaging middleware, called "mes- 
sage brokers" by The Gartner Group, 
is used by corporations that want to 
move data into disparate enterprise 
resource planning systems and 
databases without having to rekey. 
Microsoft's BizTalk server and tools, 
expected out in beta in July, will 
compete in this arena. The most widely 
used message broker products are: 

• Active InfotmationBroker 

• BEAmessage Q 

• CAI's Impact! 



• Frontec's AmTrix 

• IBM's MQintergtation 

• Mfj Series 



MSMO 

Neons NeoNei 



• Oberon's Prospero 

• Tibco's MessageBroker 



1 TSI's Mercator 
■ VIE's Copernicus 



• Vitria's BusinessWate 

SOURCI THE GAflTNEn GROUP STAUE0P.0 CONN 

calls these XML plans its value-chain 
initiative," a plan that's generating criti- 
cism and doubt across a wide spec- 
trum of industry players. 

Not surprisingly, one camp sees 
Microsoft as a hostile force out to cap- 
ture the supply-chain manageme nt turf 
through a co-opted version of XML. At 
the World Wide Web Consortium 
(W3C), the industry group defining the 
XML body of standards. Microsoft is 
pushing a particular XML data specifica- 
tion that suits its plans. And that has 
some vendors fightin' mad. 

"Microsoft is trying to co-opt XML the 
way they tried to co-opt Java." c omplains 
Jon Corshen.vice president of marketing 
at Tradex Technologies, a Tampa, Ha., pro- 
curement software vendor. "| Microsoft | 
tweaks it here and Uiere so the only way 
you can run it is if you run the Microsoft 
platform. At the basis of BizTalk is a bat- 
tle for tile next-level operating system: 
the application server." 

The Hi/Talk Server, which depends 
on the directory in the yct-to-ship 
Windows 2000, will be able to recog- 
See Microsoft, page 60 
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NT BACKUP & DISASTER RECOVERY 





PREVENTATIVE 
MEDICINE 



When it comes to absolute cross-platform data protection, turn to the relief nine out of 10 network managers prefer: Backup Exec lor Windows NT. Not only is it 100% Microsoft compatible, 
this latest release features enhanced Exchange/SQL server agents including individual mailbox and table protection. Proven. Reliable. Stress now comes with an antidote. Backup Exec 7.2. 
1-800-729-7894 ext. 81516 



Backup Exec 

www.seagatesoftware.com A Seagate Software Product 

■t" 1998 Seagate Software. Inc Seagate Backup Eiec. Seagate Software and the Seagate logo are trademarks of Seagate Technology Outside ol the US and Canada call 1-407-531-7501 
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Modeling tool puts administrators on path to Windows 2000 

BY IOHN F ON TAN A decide to untirade their network or>cr- have to be Dotted flawlessly for the ronmcnts before nul 



BY JOHN FONTANA 

There is no doubt there will be 
some heavy lifting if enterprise users 



decide to upgrade their network oper- have to be ported flawlessly for the 

ating systems (NOS) to Windows migration to succeed. To ensure that 

2000. success, network administrators will 

User, group and domain data all will have to create models and test envi- 
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An online service designed to furnish readers with a quick and easy way to 
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Easier access to more relevant information. 
24 -hour service. 

The ability to search for information by reader service number, advertiser name or product category. 
Flexibility in requesting information via mail, email, telephone, fax or linking to the advertiser Web page. 
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ronmcnts before putting the new NOS 
into production. 

To ease the burden, Mission Critical 
Software unveiled Domain Admin- 
istrator 5.0, which provides an incre- 
mental upgrade path to Windows 
2000 from NetWare or NT. The tool 
also supports migrations from Net- 
Ware to NT. 

Domain Administrator lets network 
administrators use their production 



Super model 



Mission Critical Software recently 
released Domain Administrator 5.0, 
which helps network administrators 
plan migrations to Windows 2000 
by creating models of domain con- 
solidation plans and Active Directory 
structures, ft also aids in carrying out 
those migrations. Here are the tool's 
highlights. 

• Leverages existing NetWare and NT 
directory data. 

• Uses production data for pilot and proto- 
type environments. 

• Incorporates reporting tools for assessing 
test results. 

• Automates migration from NetWare to 
NT 4.0 and Windows 2000. 

• Automates migration from NT 4.0 to 
Windows 2000. 



data in tests of domain consolidation 
and Active Directory structures. To go 
one step further, network administra- 
tors can create multiple Active 
Directory environments in order to 
test which one might best suit their 
enterprise Domain Administrator is 
part of Mission Critical s OnePoInt EA 
suite of systems management soft- 
ware and is the first portion of the 
suite to be updated for Windows 
2000. 

Domain Administrator migrates di- 
rectory data, file data and file securi- 
ty permissions to Windows 2000 
without having to rewrite or reinvent 
the design of their existing NOS 
topologies. 

For the move to Windows 2000 
from NT, Domain Administrator allows 
for changes to be done in steps. 
Network administrators use a feature 
called Active Views to simulate Active 
Directory on the NT platform. They 
can create models of multiple Active 
Directory structures and drag-and- 
drop production data into those direc- 
tories to lest which ones are best for 
their enterprises. Once a model is cho- 
sen, a drag-and-drop procedure begins 
the migration of data to the Active 
Director)' tree. 

"Restructuring domains and direc- 
See Mission Critical, pane 64 
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Secure Network Services 



Fully Managed VPNs 



Global IP Dial 



Worldwide Support 



Custom Network Solutions 
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12,000 Network Professionals 



2,000 Dial POPs 



850 Cities 



59 Countries 



One Global Network 



WELCOME TO THE POWER OF GLOBAL NETWORKING 



AT&T has completed the U.S. phase of the acqui- 
sition of the IBM Global Network. The newly 
named AT&T Global Network Services joins the 
AT&T Solutions Group to bring customers the 
most powerful set of networking solutions - 
anywhere. II While the physical assets of the 
network are impressive - providing secure 
managed network services in 850 cities in 
59 countries - it is the people, services and 
capabilities that clearly complement those of 



AT&T and, more specifically, AT&T Solutions. 
The team of networking professionals avail- 
able to serve your needs just doubled. This 
means you'll find over 12,000 of the best 
networking minds in the industry to design, 
build and manage integrated solutions to 
fuel your business objectives. II Whether it's 
Internet Protocol, Virtual Private Networks, 
security or remote access, we can help your busi- 
ness get closer to your customers and further 



ahead of the competition. II AT&T Solutions 
and AT&T Global Network Services grew 
through different, yet synergistic, paths while 
becoming leaders in outsourcing and managed 
network services. Together, this powerful com- 
bination will provide businesses of all sizes 
with the most advanced, innovative net- 
working solutions available in the world 
today. II A perfect synergy of people, capabili- 
ties, reach, services, customers. ..SOLUTIONS. 



www . att . com/globalnetwork 




GLOBAL NETWORK 
SERVICES 



AN AT&T SOLUTIONS COMPANY 
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Novell, Foundry team to speed Web site traffic 



BY ROBIN 
HOHMAN 



SCHREIER 



PKUVO. UTAH — Novell is teaming 
with Foundry Networks to deliver trans- 
parent cache switching, a way to speed 
inbound Web pages to the end user and 
save network bandwidth. 

Novell will promote Foundry's 
Scrvcrlron switch as a front end to 
servers running Novell's Internet Cach- 
ing Services (ICS) software Together, the 




Foundry's Serverlron enables transparent 
caching when used with Novell's ICS. 

tools can offer transparent caching, 
which intelligently balances the load 
among caches. With transparent 
caching, users can set parameters to 
determine what is cached and which 
cache serves up the content. 

There are two ways to proxy a Web 
server. A forward proxy acts as the mid- 
dleman between a user's request and the 
cache, and caches inbound traffic only. A 
reverse proxy sits in front of a Web serv- 
er and is used to speed Web site traffic. 

Novell's ICS acts as a forward proxy 
when used with the Foundry switch. 
The switch enables tile caching to be 
transparent. Serverlron also balances 
the load among multiple caches. 

When a user requests a page, the 
request is sent to a Serverlron switch, 
which uses Layer 4 port information to 
isolate HTTP traffic and send the request 
to the cache. If the cache lias the con- 
tent, it's served to the end user from 
memory. If the content is not in the 
cache, the cache goes through a router 
to the Web and retrieves the content. 

The switch can be configured to 
only cache certain content or to allow 
a certain group of workers to bypass 
the cache completely. 

Serverlron can also balance the load 
among caches. Customers typically 
deploy more than one cache for redun- 
dancy, and large enterprises deploy 
caches at each WAN access point. 

Contingencies 

The Foundry-Novell deal was contin- 
gent upon Foundry showing that 
Serverlron is compatible with Novell's 
ICS, which runs on a dedicated server. 

ICS is only available on servers from 
companies that have an OEM relation- 
ship with Novell. Last month, Novell 
announced a deal with Compaq and 
Dell to sell ICS on some servers. 

Although NetWare 5 is the core oper- 
ating system under the covers of ICS, the 



cache has a new file system that doesn't 
require NetWare in the network. 

Serverlron sells for $6,000 with eight 



10/1 0OM bit/sec ports. Optional eight-, 
16- and 24-port blades with Gigabit 
Ethernet uplinks, and an eight-port 1G 



bit/sec blade are also available. 

Novell: (888) 321-4272; Foundry: 
(888) 887-2652 



Low cost. 
Easily installed. 
Highly effective. 

;c: restricted access 



Just like our 
Windows NT 
server security 



CyberwallPLUS is a trademark ot Network-l Security Solutions, Inc. Windows NT is a registered trademark ot Microsoft Corp. 0f9B6 Network- 1 Security Solutions. Inc All nghts reserved. 
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Lotus extends Domino-to-ERP connections 



BY PAUL MCNAMARA 

CAMBRIDGE, MASS. — An upgraded 
integration tool will help Lotus 



Domino customers tap into a broader 
range of back-end data sources, accord- 
ing to the company. 

Lotus last week released Lotus 



Enterprise Integrator (LEI) 3.0, a devel- 
opment tool that customers and indus- 
try analysts say will bring a wealth of 
legacy data to Domino-based Web 
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Introducing CyberwaLlPLUS-SV . 
Network security for any 
Windows NT server. 

E-commerce. Extranets. Intranets. Your company's 
success now means opening your networks. But 
what about network attacks to your servers? At 
last, you can protect any Windows NT server with 
CyberwallPLUS-SV. This simple, server-resident 
solution provides full network security - even more 
secure than UNIX. Plus, it's easy to deploy, installs 
in minutes, and can be customized to your specific 
needs. Let CyberwallPLUS-SV defend your 
Windows NT servers against network attacks. 
Contact us for more information today. 

NETWORK- 1 

Security Solutions, Inc. 

Securing E-commerce Networks. 



FREE CyberwallPLUS-SV evaluation kit, including the Aberdeen Group white paper, 
"Cyberwalls: Network Security for an Interconnected World". 
http://www.netWOrk-l.com/NTWl • (800)638-9781 • (781)822-3400 



applications. 

Through the use of an administrative 
graphical user interlace, LEI allows the 
scheduling of high-volume data trans- 
fer or synchronization between 
Domino and enterprise systems, such 
as relational databases, enterprise 
resource planning (ERP) software and 
transaction processors. Programming is 
not required, Lotus says, although cus- 
tomization is possible through Lotus- 
Script and Java. 

LEI will allow customers to rapidly 
build Web-based employee self-service 
and customer relationship manage- 
ment applications, Lotus says. 

The upgrade includes support for a 
variety of new Domino Connectors, 



New features in Lotus 
Enterprise Integrator 

Formerly known as NotesPump, 
LEI includes: 

• Multithreading support for faster 
data transfer 

• Improved user interface for administrators 

• The ability to meter data flow across 
connector sources 

• Support for SAP R/3. J 0 EdwaYds ! One 
World. Oracle Applications/Financials. 
PeopleSoft R6.X and BEA Tuxedo 



which tie Domino to specific back-end 
applications, as well as management 
and performance enhancements (see 
graphic). 

Formerly known as Lotus Notes- 
Pump, the tool "has become a critical 
part of what we do," says Kent Rowe, 
manager of PC technologies at LNP 
Engineering Plastics in Exton. Pa. A man- 
ufacturer of specialty plastics, LNP uses 
the Lotus software to transfer Sides and 
research data between Notes-based 
applications and an IBM AS/400. 

The potential market for LEI is exten- 
sive, according to one industry expert. 
"Seventy percent of the Fortune 1000 
uses Notes, and those are also the ERP 
users," says Paula Boyle, an analyst at 
Kinetic Information in Wallham, Mass. 
"It's a very natural blend to bring the 
two pieces together." 

Moreover, tapping into legacy data 
can be difficult without a tool such as 
LEI, she adds. "People have been trying 
to bring it out by posting to intranets, 
but Lotus Notes offers a richer envi- 
ronment for sharing and discussions." 

LEI runs on Microsoft Windows 4.0, 
OS/2 Warp 3.0 or 4.0, HP-UX 1 1 .0, Sun 
Solaris 2.5.1 and IBM ALX 4.1.4, AS/400 
and OS/390. 

Available immediately, LEI sells for 
an estimated price of $7,995. 

Lotus says additional Domino connec- 
tors are being developed for IBM's MQ- 
Series, CICS, IMS andTransarc/TXSeries. 
They are expected to ship by year-end 

Lotus: (617) 577-8500 
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UPS. 

continued from page 51 

get two critical functions, Barry says. 
One is the ability to distribute software 
to AS/40Os. The other is a much leaner 
management agent that takes up only 
250K bytes on end stations. 

Framework vs. function 

The software distribution function fits 
into the Tivoli Enterprise framework, 
which unites many network and systems 
management features under a common 
umbrella. Industry analysts say this 
approach is starting to lose favor because 
hundreds of management software start- 
ups are rushing into the market to pro- 
vide individual functions at a lower cost. 

"Most of the innovation these days is 
in the point tools," says John McConnell, 
president of McConnell Associates in 
Boulder, Colo. He adds that many users 
can get value from loosely coupled sys- 
tems from different vendors. 

"We framework vendors kind of do 
ourselves a disservice in leading with 
the framework rather than leading with 
the solution," acknowledges Leo Cole, 



Network wida 
server upgrade I 



Individual client i 
software upgrade ! 



director of network man- 
agement at Tivoli. De- 
ploying and monitoring 
software are functions that 
users can derive real value 
from — and that should be 
the focus. 

"The fact that there may 
be a framework (to those 
functions), you shouldn't 
care about," Cole says. 
"When you're doing an 
ROI analysis, do it on a 
function basis." 



Giving UPS a boost 

Other functions in the 
framework that UPS uses 
include monitoring servers 
at its many sites. Systems managers arc- 
able to keep an eye on performance 
problems and available disk space, Barry 
says. Once the managers understand and 
correct any problems occurring at one 
site, they can propagate corrections to 
other sites, ensuring that the problems 
don't crop up there, as well. 

Barry says going with Tivoli also 
helped UPS because the company has 



Overnight upgrades 



Instead of sending support people out to each of its many locations, UPS performs more functions 
remotely, such as server and client software updates. 



Central UPS sits i Q Changes to servers and software 



Other UPS locations 



I 



are made at a central location 



UPS branch location 



Layer 5 DoS . 

Switching isliEfPk^ 




Are you Ready? 



Give the green light to QoS Video, Voice and Data commu- 
nications with the VIPswitch series of Layer 5 products. 

Finally, Plug-&-Play Ethernet switches that guarantee jitter- 
free Video & Voice, without delay at non-blocking speeds. 



Q Support staff can take over individual clients 
to fix problems and install new software. 



many different kinds of systems to man- 
age — including mainframes, IBM 
AS/400 mid-range computers, Unix 
boxes, NT servers and OS/2 desktops. 
With Tivoli software, UPS can monitor 
and manage all these disparate systems 
using the same tools. 

UPS' technical support staff also uses 
Tivoli's remote control software to take- 
over computers remotely via the net- 
work and fix any problems. 

"The frameworks tend to have value 
for large organizations, rather than small 
ones," McConnell says. A large company 
such as UPS can benefit from the tools 
being consolidated in one place. 

As for the criticism that framework- 
based management software is difficult 
to implement, Barry says his implemen- 
tation went off widiout a hitch. How- 
ever. UPS went through a methodical 





- HK3S3 

www.VIPswitch.com • 800-638-2677 ext. 24 



Frame relay network 



© Changes are 
propagated 
to servers af 
UPS' 1.200 
locations. 



process of testing that started in June 

1 997. Implementation began in January 

1998, and deployment wasn't completed 
until August 1998. 

But with the framework in place, UPS 
is hoping it can easily plug in new appli- 
cations. Barry says UPS will extend its 
use of Tivoli software next year with the 
vendor's new Cross-Site product. Cross- 
Site lets users send data securely 
through a firewall over an open network 
such as the Internet. While Cross-Site is 
intended for use between businesses 
that arc partners in a supply chain, UPS 
plans to use it to send updates of sales- 
force automation software to its sales 
executives on the road. 

Based on the success with Tivoli so 
far, UPS plans to implement Tivoli soft- 
ware for its entire worldwide operation 
by 2004. B 



Microsoft, 

continued from page 54 

nize XML data, convert between data 
Ibrmat-s and send business data to be 
processed in back-end applications or 
v alue-added networks. 

Microsoft says it will include its own 
XML data specification in its products 
— whether or not the W3C or anyone 
else approves it. 

" litis is not a Redmond ivory tower 
project." says Marcus Schmidt, Micro- 
soft's industry manager. "This will 
involve a collaborative effort to define 
the schema. But we don't want to be 
hung up in long standards reviews." 

BizTalk XML will be supported not 
only in BizTalk Server, but in all 
Microsoft client applications, such as 
Outlook and the Microsoft portal. MSN. 
Microsoft is also signing up vendor part- 
ners for support. For instance, SAP says it 
would back BizTalk in its flagship enter- 
prise resource planning product, R/3. 

But Frank Buchheit, director of pro- 
curement and supplier management at 
SAP America, expresses some doubt 
about how soon that will happen. 
"We 11 work with Microsoft, but at SAP, 
we're starting to work on Release 2.0 of 



our business-to-business component 
for the R/3," Buchheit says. Whether 
BizTalk can make it into the next busi- 
ness-to-business release may depend on 
how far Microsoft gets in its XML plans. 

"There's every indication with SAP 
that its interests are served by serving 
SAP, not Microsoft.'' says Ross Altman, 
research director at The Gartner Group. 

In Altman's view, Microsoft 's BizTalk is 
a push into the middleware product 
arena that Gartner defines as "message 
brokers."This is software used in supply- 
chain management to distribute pur- 
chase data plucked off electronic busi- 
ness forms that needs to be sent into 
inventory and warehousing systems. 

There are already several software 
packages for message brokering, such 
as Neon's NeoNet and Tibco's Message- 
Broker (see graphic, page S4). Micro- 
soft is proposing its BizTalk initiative as 
the standard, Altman notes. 

Altman is skeptical about the Micro- 
soft effort. BizTalk "is mostly about inte- 
grating systems across enterprises," he 
says.butAltman doubts Microsoft can get 
so much done in the summer. He pre- 
dicts: "Microsoft will not offer a compre- 
hensive set of integration middleware 
within the next three years." B 
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Stackable Switches & Switching Routers 
Fastlron Workgroup & Backbone Switches 
Netlron Switching Pouter 
Turbolron/8 Switch & Switching Router 




Serverlron Server Load Balancing Switcl 



Whenever top-tier ISPs like AOL"; Yahoo! 1 and MindSpring* cry out for maximum speed, 
we heed their call. When enterprises like First Union National Bank, LTV Steel and 
Carnival' Cruise Lines grasp for reliability, we leap to the rescue. And when organiza- 
tions like the University of Southern California and the National Institutes of Health 
search the world for price and performance, we arrive just in time. 

(but we also have special powers.} 

We're Foundry Networks. And we've got powers no one else can match. For starters, 
we're the only vendor to offer super-fast 10/100 and Gigabit Ethernet switches for 
Layers 2, 3, and 4-7— all totally integrated. Plus Packet Over SONET WAN links. That's 
product breadth from the network edge to its core. 

Then there's our super feature set. Integrated multi-protocol wire-speed routing and 
application-aware Layer 4-7 switching. Plus 64 port Gigabit Ethernet density at up 
to 96 Mpps for maximum investment protection and flexibility. 

Yes, we've won multiple awards for product and corporate excellence, but we're not in this 
business for the praise. We're in it to give our customers IronClad Network Performance. 
Does that make us superheroes? We don't know. But our customers might. 

Visitwww.foundrynetworks.com/turboman for a hot deal on 

our hot products. Or call, 1-888-TURBOLAN (887-2652). FOUNDRY 

NETWORKS 

phone: t08.530.3300 visit: www.foundrynetworks.com email: infosloundtynet.com 




Fastlron II Wiring Closet Switch 




Biglron 4000 Switch & Switching Route 




Biglron 8000 Switch & Switching Route 



See Foundry at 

Networld+lnterop Las Vegas '99 
Booth #5977 
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Mission Critical, 

continued from page 56 

tones, and shifting to a new operating 
system is no easy task," says Sue Al- 
drich, an analyst with Patricia Seybold 
Group. "This tool looks invaluable for 



saving time and trouble " 

Domains are consolidated by migrat- 
ing user accounts, global and local 
groups, and NT member servers and 
workstations into Windows 2000. Do- 
main Administrator automatically up- 
dates the file systems and access control 



lists to reflect the new user accounts. 

"We are trying to package all the 
domain stuff in one product," says 
Kent Erickson, director of product 
management for Mission Critical. 

For NetWare users on versions 3x 
through "5.x, Domain Administrator 



YOU'RE AT THE EDGE, 
AND THE 
VISIBILITY STINKS. 




ith lower costs and higher performance, 
WAN services are looking mighty attractive 
these days. But look out. It's become nearly 
impossible to see how your many connections 
and the critical applications they enable are 
doing. Try to look beyond the LAN and the 
picture is damn cloudy. 

It doesn't have to be. With Digital Link's 
Solo Select Performance System at the 

network's edge, 
you can gain 
remarkable 
visibility across 
the widest of 
WANs. This 
highly intelligent 
system provides enterprise network managers 
an integrated set of solutions for viewing the 
health of a network in real-time. 

You get in-band SNMP management. Data 
link-layer testing. Central and remote element 
management. You get performance monitoring 
solutions based on industry standards with 
management scalability and the flexibility to 
migrate to higher bandwidths. 

To learn more about today's important 
WAN management issues, you need to visit 
www.at-the-edge.com for your free copy of our 
"Wider Answers" Primer. It will start clearing 
things up for you immediately. 




Digital Link 

WIDER ANSWERS 

Please visit Digital Link at ISPCON '99 Booth #949 
And Networld + Interop '99 Booth #S6l 1 



migrates the schematic data of Novell 
Directory Services (NDS) and the 
NetWare Bindery to Windows NT and 
Exchange directories or to Active 
Directory. Group memberships also 
can be preserved, and NDS organiza- 
tional units are mapped to NT securi- 
ty groups. NetWare users also can 
selectively migrate file structures, files 
and security permissions, and can 
retain all NetWare security settings. 

The only task that can't be accom- 
plished with Domain Administrator is 
migrating network printers because 
there is no way to remotely install 
printers in NT, according to Erickson. 

Domain Administrator runs on both 
NT and Windows 2000. and is priced 
at $27 per managed user account. 

Also last week, Mission Critical 
released the beta of OnePoint Web 
Administrator, a Web client for the 
OnePoint suite. The interface is 
designed for routine departmental 
administration on NT and Windows 
2000, such as creating user accounts 
and changing group memberships. 
The client will eventually become the 
standard interface for routine func- 
tions throughout the suite. It is 
expected to ship next month. 

Mission Critical: (713) 548-1700 



Registry, 

continued (rom page 53 

single registry keys. For example, 
administrators can set file/save op- 
lions and time zone settings and 
change start-up screen instructions. 
The tool also features controls on the 
security of remote registry keys. 
Administrators can add or remove 
users and groups from the access 
allowed, access denied and audit 
access control lists. 

"Most security problems are users 
breaking things by changing settings 
or deleting system resources," says 
Greg Eytcheson. president of Eytch- 
cson Software. "If you block changes, 
you can save hundreds of hours of 
administration." 

The tool also lets administrators 
remotely change user names and pass- 
words used for remote services. Other 
features include search and replace, 
which allows administrators to do tasks 
such as search for drive maps and 
replace them with new ones after 
changing the name of a network 
server. The tool also has a drag-and-drop 
feature for copying values from one key 
to another or copying keys from one 
computer to another. Auditing and 
query utilities also are included. 

Multi-Remote Registry Change 3.0, 
which can support up to 25,000 
machines, is available now and 
priced at S35 per administrator and 
S2 per managed computer. 

Eytcheson: (3 16) 332-4604 
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In a world 
of multiple 
operating 
systems, what 
printers speak 
your language? 




Continuing the 25-year history 
of quality DIGITAL printing 
solutions, Compaq now offers 
the LN 16 and LN32 laser 
printers, providing the perfect 
combination of speed and 
performance for your 
department, with complete 
support for Windows,® 
Windows NT? Novell? and 
Unix® operating systems, as 
well as OpenVMS, VAX and 
AlphaServer environments. 
They also support TCP/IR 
IPX/SPX for Novell NetWare? 
and EtherTalk® for Macintosh* 
network protocols. 

The new lineup of Compaq 
laser printers are versatile and 
affordable and provide fast, 
quality printing in demanding 
office and network 
environments. 




The LN32 gives you up to 
1 200 x 1 200 dpi at a blistering 
32 pages per minute, and 
enough input and output 
options to satisfy the most 
demanding paper-handling 
requirements. What's more, 
you get Adobe® PostScript® 
Level 3 for the ultimate in 
providing increased font 
capacity, graphic definition, 
and precise representation of 
complex images. 



For network and system 
administration, the LN32 also 
includes Remote Control 
Software - a graphical tool that 
allows you to monitor and 
manage not only the LN32, 
but all of your SNMP printers 
across a TCP/IP network. 

At 1 7 pages per minute and 
resolution of up to 2400 x 600 
dpi, the LN16 delivers rich 
blacks, crisp edges, and finely 
detailed halftones to the most 




demanding small- to medium- 
sized workgroups - at a price 
your CFO will love. 

Don't let multiple operating 
systems short-circuit your 
network. For rock-solid 
reliability, superb performance, 
and low cost of ownership in 
multiple operating systems, 
choose new, genuine Compaq 
laser printers. 

New "Try Before You Buy 
program makes it easy to 
evaluate any Compaq printer 
at your site for 15 days. Find 
out how great these new 
printers perform. 

For details, call 
1-800-AT-COMPAQ or 
visit www.compaq.com 



COMPAQ. 



Better Answers." 



©1999 GENICOM Corporation. DIGITAL and OpenVMS arc 
trademarks of Compaq Computer Corporation. All otJicr 
company and ptoduct names air trademark* or rcgisicrcd 
trademarks of the their respective companies. GENICOM is a 
supplier of Compaq fcntcrprbe primer product!. 
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EVERYTHING BUT 



THE PLUNGER 



Symantec's Norton H efpDesic Assistant is a powerful 
suits for centralized support of network client plumbing. 



BY RAM TACKETT 



NetworkWarid 



When you're having one of those 
days when your normal trickle of 
trouble calls threatens to turn into a 
flood, you can reach for a new suite 
of applications from one of the old- 
est names in the utilities business. 
Norton HclpDcsk Assistant (NHDA) 
Version 1 .0 lets your help desk plug 
the leaks on your network clients 
with an integrated package that includes five venera- 
ble Symantec applications on a single CD-ROM. 
Together they give you client troubleshooting and 
optimization, crash protection and recovery, and 
remote control in a single package. None of NHDA's 
components are new, and all are available separately. 

Norton Utilities is the granddaddy of PC utility 
suites. It includes diagnostic and optimization utili- 
ties, such as Norton Disk Doctor and Speed Disk. 
Among the most useful utilities is Norton System 
Doctor, which gives you prioritized recommenda- 
tions for the best way to solve computer problems, 
such as disk fragmentation and low disk space, and 
automatically executes programs to implement the 
fixes if it can. Norton Advisor provides an explana- 
tion and recommends a solution, listing common 



Net Results 

Norton HelpDesk Assistant 

Symantec 
(408) 253-9600 

www.symantec.com/sabu/nhda/index.html 
$115 per node for 100 nodes 

Pros 

▲ Many useful preventive and diagnostic utilities 
A Components are integrated under a single interface 
Con 

T Lacks Norton Antivirus 



The Norton System Center Snap-in 
for Microsoft Management Console 
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disk problems and error messages from DOS, 
CHKDSK and some standard applications. 
Many fixes it recommends involve one of the 
Norton Utilities programs, which can be 
launched quickly using a command button 
that automatically appears. 

Norton System Center (NSC) reduces support 
costs by enabling you to distribute, manage and 
update the NHDA applications from a central site. It 
also allows you to manage Message Relay Targets — 
Windows NT servers designated as central event 
repositories for Norton Antivirus alert messaging. You 
can keep the software for networked and mobile 
users currently using the LiveUpdate administration 
program included with the product. 

Norton CrashGuard gives you crash protection; it 
intercepts exceptions before they swamp your appli- 
cations, lets you continue working and can free 
frozen applications. In our test using a Microsoft 
Word macro designed to hang the application, 
CrashGuard's FreezeCheck successfully detected 
when Word was unresponsive and helped us save the 
contents of the document before shutting down the 
application. CrashGuard then asked whether we 
wanted to restart the application or Windows itself. 

CrashGuard didn't work as well when we ran into 
Windows' infamous "blue screen of death" after remov- 
ing a CDROM from our test PC while the CD-ROM 
was being read. Repeatedly pressing ctrl/alt/delete on 
the test machine gave us only "Windows is waiting 
for a Close dialog to complete" messages, and the 
machine finally locked up. CrashGuard never tried to 
thwart the crash. 

The pcAnywhere32 application makes it easy for 
help desk staff to connect to and control a user's PC, 
wheUier the user is at home, on die road or in a corpo- 
rate office.The PCs can be remotely controlled via a 
modem or the Internet. In addition to remote control, 
pcAnywhere32 can quickly synchronize files between 
two computers using SpeedSend technology, which 
sends only die differences between the files. 

You can install NHDA to DOS, Windows 9X or 
Windows NT clients from a Windows NT work- 
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Colored icons indicate trie status of jobs. 



The left pane includes a list of available products and tasks. 



station or server. The administrator product can plug 
into the Microsoft Management Console, but if you 
plan to enable MMC integration, pay close attention 
to the chapter in the Norton System Center Admini- 
strator's Guide regarding NSC installation. For in- 
stance, if you plan to have Norton Event Manager and 
Norton Antivirus — which does not ship with NHDA 
— installed on the same machine, Norton Antivirus 
must be installed first. Norton Event Manager is an 
NSC snap-in, which can send notifications of virus 
activity on workstations through e-mail, the Windows 
NT Messenger Service, a network broadcast or SNMR 



Norton HelpDesk Assistant components 

Norton Utilities 4.0 for Windows 95/98 
Norton Utilities 2.04 for Windows NT 
Norton System Center 3.1 
Norton CrashGuard 4.01 for Windows 95/98/NT 
pcAnywhere32 8.02 for Windows 95/98/NT 
Norton Ghost 5.1c 



While the other components are accessible from a 
single interface. Norton Ghost is not. Norton Ghost is a 
disk imaging and disaster recovery product that can sig- 
nificantly reduce the time and expense it takes to recov- 
er a crashed PC. With it you can recover whole hard 
drives and partitions. You can also restore individual 
directories and files from a pre-existing image file using 
the Ghost Explorer application that ships with NHDA. 

Though Ghost is a thumb next to four integrated 
fingers, the whole suite really deserves a hand. With- 
out involving the corporate help desk staff, NHDA 
helps maintain users' computer systems at peak per- 
formance levels, minimizing downtime and freeing the 
help desk to address other 
pressing support issues. 



Centralized 

Cp nr nf ar( | Diagnostics Remote control Crash protection System restore administration Installation Documentation Total 
JLUIBUIIU 20% 20% 20% 20% 10% 5% 5% score 

Norton HelpDesk 8 x 20 = 1 60 9x^0 = 1 80 8x20.1.60 9x.20 = 1.80 9x.10 = 0.90 9x.05. 0 45 9x.05»0.45 8.60 

Assistant 

Individual category scores ate based on a scale of 1 to 10. Percentages are the weight given each category in determining Hie total score. 



Tackett is president of 
Abacus Technologies, a net- 
work, application develop- 
ment and technology assess- 
ment company In Houston. He 
can be contacted at rtackett 
®abacustech. net. 
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All SuperStack products 
come with 90 day Support. 

Become the genijs behind a growing 
network with SuperStack II Switch 1100 
and 3300 units. They're the key to a 
high-performance, cost-effective switching 
solution that's scalable to grow with your 
network. Fast Ethernet, Gigabit Ethernet, 
and ATM backbone connections are 
supported, and up to four units can be 
stacked for a total of up to 110 ports, lust 
connect additional switches via the built-in 
matrix port and you're ready to connect 
new users. 

Auto-sensing ports automatically 
adjust for 10BASE-T or 100BASE-T devices 
to give you fast bandwidth where you need 
it while efficiently maintaining existing 10 
Mbps desktops. So as you migrate to higher- 
bandwidth networking, the SuperStack II 
family is there to meet the demand. 

The SuperStack' II Switch 3300 
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It doesn't take a genius to see 
that stackable switching from 3Com " is 
the smartest way to grow with your 
network. For more information, call us 
at 1-800-NET-3COM or visit our Web site 
at www.3com.com/promotions/ssoffer. 



More connected. 
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Management, 

continued from page 51 

Kassabian prefers to use a combi- 
nation of free utilities and commer- 
cial software. He combines vendor 
tools such as Cabletron's Spectrum, 
Concord's Network Health and Net- 
work Associates' Distributed Sniffer 
with ping, traceroute, mon and 
swatch. 

Here are 10 management tools 
that can get you started managing on 
the cheap, in no particular order. 

This is not an all-inclusive list — 
in fact, if there are other tools 
you swear by, let us know by e-mail- 
ing us at jcaruso@nww.com. 

1. Ping (of course) 

Ping, which some say stands for 
Packet InterNet Groper, has been 
around since 1983. 

The program lets you know if 
one device can reach another over a 
network. Ping does this by sending an 
echo request using Internet Control 
Message Protocol. 

This free utility has been ported to 
major operating systems, including 



Unix variants, and Windows NT and 95. 

2. Traceroute 

Another common utility is trace- 
route. It's similar to ping, in that 
traceroute demonstrates if a packet 



can make it from one device to 
another. 

But traceroute also displays the 
route the packet takes through the 
Internet and the time it takes to 
get from one hop to the next. By 



demonstrating these things, trace- 
route can show where delays arc the 
greatest and where trouble spots 
may exist. 

3. MRTG 

MRTG monitors the traffic load on 
network links. The software collects 
traffic data from routers via SNMP 
and displays the data in a graph on 
a Web page. 

MRTG keeps data over long 
periods of time, showing traffic 
trends for the past week, month 
or year. Network managers can 
configure MRTG to collect and 
display trends on any SNMP 
variable. 

Many managers use MRTG to graph 
network trends, says Scott Parker, 
chief technology officer at South- 
ernview Technologies, a consultancy 
based in Atlanta. 

"Who wants to go buy SAS [In- 
stitute softwarel just to do graphs?" 
he asks. 

4. Scotty 

This utility is a network manage- 
ment platform based on the Tool 



Mapping on the cheap 

Ipswitch's WhatsUp Gold creates maps of users' networks, ft may not be as fancy 
as the major network management vendors' software, but it does the basics. 
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This IT manager is This IT manager is 

monitoring capacity in Chicago. paying bills for Dallas. 



You ran now manage all of your data ami voire rnminunicatinns over the Internet. Willi MCI WorldCom Interact." 11 real-time traffic 
monitoring and routing, electronic lulling and secure online payments, among oilier opiums, are liierally a mouse click away, 
MCI WorldCom Interact allow s you to manage our unsurpassed voice and dala services from wherever von are. whenever vour business 
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Command Language. With it, net- 
work managers can write scripts to 
automate network tasks. Scotty dis- 
covers what devices are connected 
to a network, filters events, provides 
for troubleshooting and includes a 
browser to look at an SNMP manage- 
ment information base. 

"Scotty is not as extensible as 
Hewlett-Packard's OpcnVicw or 
SunNct Manager, but it performs 
the basic functions I really need, 
at no cost," the University of 
Mississippi's Myrick says. 

5. QueSO 

Que Sistcma Operativo (QucSO) 
is a utility that can tell you 
what operating systems are run- 
ning on remote hosts by sending 
TCP packets thai don't make sense 
to the host. 

Standards don't define how oper- 
ating systems should respond to 
nonsensical packets, so each oper- 
ating system has a distinctive 
response. QueSO compares the 
response against a list of known 
operating systems and lets you 
know if it finds a match. 



6. Nmap 

Like QueSO, nmap scans the net- 
work for hosts, revealing what operat- 
ing system and services those hosts 
are running. 

Nmap sends out parallel pings to 
all servers on a network to see 
which ones are up, and it scans for 
TCP ports to see what services — 
such as e-mail and Web pages — arc- 
available on the server. 

7. Tcpdump 

The Unix utility tcpdump prints out 
the headers of packets that go through 
the computer's network interface. 

Network managers can filter 
out the specific packets for which 
they're looking. They can look 
at packets using a particular pro- 
tocol, check for those bound for 
a specific destination or find 
packets by using a certain TCP port 
number. 

8. Mon 

Mon is software that can monitor 
network resources, watching for 
server problems and ensuring that 
services such as Web pages and 



e-mail stay available. Network man- 
agers can configure mon to watch 
the service of their choice and gener- 
ate an alert if that service goes down. 

9. Swatch 

No relation to the manufacturer of 
precision timepieces, swatch, or 
Simple Watchdog, is another Unix util- 
ity. It monitors messages written to 
the Unix system message log. Based 
on what messages are written there, 
swatch can lake actions to notify a 
network administrator. For instance, if 
the file system is full, swatch could 
notify the administrator by sending an 
e-maU message. 

10. WhatsUp Gold 

Ipswitchs WhatSUp Gold is the 
only utility on this list that costs 
money, but at roughly $700, 
it costs quite a bit less than most net- 
work management software. 

The product can tell network 
managers when a device or service 
fails (see graphic, page 68). Ipswitch 
this month is shipping Version 4.0 
of the utility, which adds reporting 
capabilities. 



The software keeps a running 
tab of how often and for how long 
devices go down, and generates 
reports on the information. Network 
managers often use the product 
as a backup to other commercial 
network management systems. 

There are plenty of other free 
utilities available, including some 
on the security side. Even if you 
use commercial management prod- 
ucts, your toolbox is not com- 
plete without at least a few of these 
free tools in it. B 
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This IT manager is 
rerouting calls from Boston to Phoenix. 



MCI WORLDCOM, 

demands. In fail, no other Internet tool offers more control over your network. 
To learn \\h\ MCI WorldCom Interact was named the best Internet/Intranet product 
al the Com.Net "')<) Conference, visit our Well she al www.wconi.roni 

Free Product info enter NWInfoXpress #43 online @ www.networkworld.com/lnfoxpress 
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BEA clusters Java components, boosts Web performance 



BY JOHN COX 

SAN JOSE — Keeping a critical 



electronic commerce application up 
and running is the focus of BEA 
Systems latest Web application server. 



BEA's WebLogic 4.0, through a JavaBeans, and runs them simultane- 



$5,000 add-on, creates copies of Java 
software programs, called Enterprise 



keeps you healthy. 

and helps you 
money too. 



No, 

it's not 
your mother. 
It's the 
next best 
thing: 
NETSavings 




Ever wonder how much your network is worth to your business? 
$50,000? $150,000? $500,000? Turn it off for five minutes and you'll 
find out. 

That's the simple principle behind NETSavings — the 
mother of all network-performance management 
services. 

NETSavings is a service provided by your VAR or ISP 
that allows you to enhance the performance and 
improve the reliability of your LANs and WANs. 

Imagine fixing broken links before your users 
notice a problem. Eliminating bottlenecks 
before the complaints pour in. Adding the 
bandwidth you need, wherever you need it — 
without the guessing games you play today. 

With NETSavings you can improve more than 
the performance of your network. You can 
enhance the performance of your business. 
And isn't that what your IT infrastructure is 
really about? 

Find out what NETSavings can do for the 
value of your network, and your business. 
Call 1-800-487-7779 or visit us on the 
Web at www.lanquest.com and use 
our Network Value Calculator today. 




LANQuest 
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ously on several WebLogic servers. As 
a result, this cluster of programs can 
handle a larger number of user 
requests and balance the traffic load 
of requests across several WebLogic 
servers. 

Finally, if one copy of the pro- 
gram fails or goes offline, the other 
copies remain available so the 
Web application keeps running. 
Unlike a traditional HTML Web 
server, WebLogic is aimed at ap- 
plications that use or create fast- 



BEA's latest Web apps server 

WebLogic 4.0s focus on performance: 

• Creates copies ol Java components. 

• Runs the copies on multiple WebLogic 
servers. 

• Balances workload by shifting requests 
among servers. 



changing data, such as a car builder 
buying parts via an intranet from 
a supplier, or hundreds of con- 
sumers buying books through 
an online book store. Application 
servers run key parts of the ap- 
plication code and usually sit 
between the Web server and various 
back-end databases and trans- 
action systems. 

The new BEA software boosts the 
performance of this middle-tier serv- 
er so it can handle the fast-growing, 
always shifting traffic loads found in 
e-commerce applications, says Scott 
Dietzen, chief technology officer of 
the WehXpress division of BEA 
Systems in San Jose. 

The WebLogic server code was 
changed to support the new lava 
Bean clustering, at least via the 
S5.000 option. The server code was 
also tweaked in many areas to boost 
performance, according to Dietzen. 

BEA claims that tests made using 
third-party measures show Web- 
Logic 4.0, with the clustering 
option, could support up to 2,627 
Web page views per second. The soft- 
ware was loaded on a trio of 4-CPU 
Windows NT servers. In the tests, the 
setup was able to support 10.000 
concurrent users, according to the 
company. 

Available now, after a five-month 
beta test, WebLogic Server 4.0 is 
priced at $10,000 per server CPU. 
Interested users can obtain a free 
evaluation copy from www.beasys. 
com/weblogicserver4 . 

BEA: (800) 932-5644 
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Every monitor in your company is in 
color. The Web is in color. PowerPoint' 
presentations are in color. But for some 
reason, even laser printer on your network 
is black And while. Why? Probably that 
pesky little barrier: price. 

Well, say hello to the color laser printer 
that shatters the price barrier, the new 
Minolta Color PageWorks™ I . 

The CPW I printer gives vou dazzling, 
2400 dpi, jus! like a photograph color for 
an estimated street price of just $1,699. 
ITiat makes it the most affordable color 
laser printer in its category. 

And you won't have to wail by the 
printer lo be impressed since Minolta's 
Advanced Processing technology gives 
the CPW E ama/ing lirst print speed. 

So start doing your printing the same 
way you do every thing else. In color. Call 
l-888-264-oo58 lor a free CD-ROM, or 
visit us at: www.minoltaprinters.com 



MINOLTA 
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'Net Insider . Scott Bradner 

The absurdity of putting limits on technology 



The U.S. government still seems to 
think we know how to do encrv p 
(ion better than the rest of the world 
and limits (he quality of the encryption 



technology that can he exported. 

litis is a demonstratively silly idea, 
yet the U.S. government persists in its 
delusions. At least I assume thev are 



delusions because the only other 
obvious explanation would be that 
Clinton administration officials are 
being overly conservative with the 




Nothing beats the IntraPort family for scalability, client support, and security. 

And high-speed remote access. 



Designed for small to medium- 
zed companies or branch offices 
that need up to 64 simultaneous 
miote access sessions and/or up 
to 16 site-to-site connections. 



For medium-sized businesses or 
large branch offices that need up 
to 500 simultaneous remote 
access sessions and/or up to 
32 site-to-site connections 



VPN for demanding corporate 
environments. Support for 
10.000 remote clients and 128 
site-to-site connections. 



Designed for large central sites 
that need scalability up to 
40,000 simultaneous remote 
access sessions and/or up to 
512 site-to-site connections. 




VPN that fits your network 
today and tomorrow. 



I he Intral'ort " VI'N access server family 
delivers more features and flexibility than 
any other VI'N product available — bar 
none With the industry's broadest client 
and protocol support, the IntraPort 
integrates VI'N into your existing network 
and allows remote users to continue to 
work securely on the platlorms they're 
comfortable with 

IntraPort VI'N solutions fulfill the high 

speed promise of DSL and table-modem 
access The IntraPort family is built 
specifically to take full advantage of these 
high-bandwidth technologies to allow 
access to your networks at the fastest 
speeds possible. 

Whether you need VPN access tor ten or 
10,000 users, the IntraPort family is the 
solution Find us on the web at: 
www.compatible.com/vpn_now/ to sign 
up for our VPN application success 
handbook, or call today to get real 
about VPN now! 



IntraPort family products feature: 

I Clients included at no charge: Windows 95, Windows 98, 
Windows NT (4.0 and later), PowerMac (System 8.0 and later). 
Intel-based Linux, Sun Solaris 

I Client Access Protocols: IP-in-IPSec for all clients: 
IPX-in-IPSec for Windows clients 

I Site-to-Site Protocols: IP-in-IPSec, IPX-in-IPSec, AppleTalk-in- 
IPSec, Spanning Tree bridging in IPSec 

I Security: IPSec/IKE, coprocessor-based DES/30ES encryption. 
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(ruth in front of Congress. 

Recent developments in the cryp- 
tography field will make it still harder 
for the administration to maintain that 
limiting the quality of exportable en- 
cryption technology does anything 
other than harm U.S. companies. 

Israeli scientisi Adi Shamir recently 
announced that he had developed yet 
another way to help break the secret 
keys for what is currently regarded as 
the best type of encryption in use on 
computer networks. 

Shamir is the co-developer, along 
with Ron Rivest from MIT and Leonard 
Adleman from the University of 
Southern California, of the RSA public- 
key cryptography technology. RSA and 
other public-key cryptosystems are 
already widely deployed in computer 
systems and are seen as the best hope 
for scalable and reliable encryption sys- 
tems for use on the Internet. 

Shamir's new announcement regards 
a special computer, at this point only a 
proposal, which would significantly 
improve the ability of code breakers to 
find the secret key needed to decrypt 
data that has been encrypted using pub- 
lic-key cryptosystems. 

It might seem a bit counterproduc- 
tive for an inventor of a public-key 
cryptosystem to help develop methods 
for breaking the security of public-key 
cryptosystems, but this is typically how 
people in the crypto business work. 
Unless you try to break the encryption, 
you do not know how good it is. In 
addition, one has to assume that gov- 
ernment agencies in many countries 
are doing their best to break crypto- 
systems used by rival governments 
(and businesses in rival countries). 

But Shamir's announcement means 
that the quality of the encryption 
needed to protect the secrets of 
American businesses now has to be 
higher than it was before. The encryp- 
tion picture is constantly changing. 
The only sensible thing to do — if the 
administration is serious about pro- 
(ec(ing (he asse(s of American compa- 
nies abroad — is to remove all limits 
on the quality of the cryptosystems 
that can be exported from the U.S. 

The administration tells horror stories 
about the dangers of pedophiles, terror- 
ists and foreign spies using encryption to 
thwart the efforts of law enforcement 
officials. But the administration must 
assume the existence of a really strange 
class of criminals — people too dumb to 
surf the Web to get good encryption soft- 
ware and too smart to get caught via nor- 
mal law enforcement methods. It's a 
strange world the administration lives in. 

Disclaimer: Some claim that it's a 
strange world Harvard lives in, but the 
above are my observations. 

Bradner Is a consultant with 
Harvard University's University In- 
formation Systems. He can be reached 
at sob@harvard.edu. 
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Drop by and hear why our ATM access solution has left the 
competition speechless. And why not? We've integrated high- 
quality compressed voice with video and data for unparalleled 
network efficiency and bandwidth availability. Of course, 
we've also made it easy to configure and manage. But hey, 
don't take our word for it. Check out our demos and find 
out for yourself. They're at www.mariposatech.com, or call 
us toll-free at 1-877-4T0-HEAR (1-877-486-4327). 




Mariposa 

Technology, Inc. 



Data. Video. Voice. Vision. 
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OF OUR MOST HOLY NETWORK 



Rule your network with better and more actionable information than you've ever had before. Network Health is __ ^™^^ v ir*^n i-^ 

the software analysis and reporting solution that lets you control your network's efficiency, make smarter budget \_C_/|^J I (J l\ I) 

decisions and prove your points with irrefutable facts and figures. People will flock to you for answers. Please, be 

generous with your wisdom. To learn more, visit us at www.concord.com, or call 800-851 -8725 or 508-460-4646. The Total View 
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If youT Internet telephony 

supplier doesn't have serious 
Ik telephony experience, 
^ you may not be happy 
m with the results. 



Whether you're evolving your current network or building a solution from the 
ground up, Nortel Networks* can deliver it without any surprises. Only we have 
the experience and the expertise to give you Internet telephony without sacrificing 
reliability. We'll give you more than just voice over IP. We'll give you features your 
users rely on, like caller ID, conference calling and call transfers. Just click your 
mouse and come together with Internet telephony. www.nortelnetworks.com/16CS 
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How the world shares ideas. 
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By Steve 
Blass 

In our intranet, 
we are trying to 
set up our Cisco 
4700 routers to 
route IP multicasts. 
How do we config- 
ure them? 
Via the Internet 

Use the IP Multicast-routing 
command in the global configu- 
ration mode to set up IP Multi- 
cast routing. You need to config- 
ure the Protocol Independ- 
ent Multicast (PIM) protocol for 
each interface on which you 
want to run multicasting. (This 
also enables the Internet Group 
Management Protocol.) 

If you want your routers to for- 
ward all multicast group packets, 
use Dense Mode PIM. To config- 
ure this PIM on Interface I, for 
example, you'd use the com- 
mands: "interface ethernet 1" 
then "ip pirn dense-mode." 

If you want your routers to 
restrict multicast forwarding by 
requiring explicit JOIN requests, 
configure PIM in sparse mode. 
You'll need to define the leaf 
node router's multicast ren- 
dezvous point router and in- 
clude that in the configuration 
commands. For example, to 
configure Interface 0 to operate 
in sparse mode with a ren- 
dezvous point one hop away at 
IP address 10.1.2.3, you'd use 
the command "ip pirn rp- 
address 10.1.2.3 1" in global 
configuration mode. Then issue 
the commands "interface ether- 
net 0" and "ip pirn sparse- 
mode." A sparse-dense mode 
option allows an interface to 
operate in either mode based 
on the properties of the multi- 
cast group using the interface. 

As a network architect at 
Sprint Paranet in Houston, 
Blass understands the 
strain of developing and 
managing intranets. 

Send your problems to 
driulranet@paranet.com. 
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Technology 

An Inside Look at the Technologies 
and Standards Shaping Your Network 

COPS lays down policy-management law 

BY MIKE COOKISH 



BY MIKE COOKISH 

Polio -enabled networks promise- 
to help net exeeutives more 
effectively allocate network 
resources and reduce management over- 
head. Turning these promises to reality, 
however, will require several key infra- 
structure elements. 

These elements include policy servers 
and policy-aware switches, routers and 
end stations. According to the Internet 
Engineering Task Force (IETF), policy- 
servers, called Policy Decision Points 
(PDP), will make most policy 7 decisions. 
Policy-aware switches and other devices, 
called Policy Enforcement Points (PEP), 
will be charged with controlling applica- 
tion access to network resources. 

Helping PDPs and PEPs coordinate 
their policy undertakings — and helping 
them intemperate, even though they 
may come from different vendors — will 
be a protocol, known as the Common 
Open Policy Service (COPS), now in 
draft form at the IETF. 

COPS will be charged with maintain- 
ing communications between the vari- 
ous policy servers and enforcement 
devices used in LANs. COPS' chief virtue 
is its ability to maintain "state" between 
PDPs and PEPs. That ability means that 
COPS is able to give a policy server an 
ongoing awareness of PDP and PEP 
activities; any change in operating envi- 
ronments or in specific policies can be 
implemented quickly and efficiently. 

Other network management proto- 
cols such as SNMP can be programmed 
to do the same, but they would demand 
greater administrative overhead — and 
would introduce greater complexity — 
than the simple, straightforward COPS. 

COPS is a query-and-response protocol 
that relies on TCP/TP as its transport 
mechanism. COPS' essential function is to 
carry messages between a policy server 
and its various clients, the PEPs. 

For instance, a local Layer 3 switch or 
router receives a Resource Reservation 
Protocol (RSVP) request to initiate a ses- 
sion with another network node. The 
switch — a PEP device in policy terms 
— needs to perform admission control, a 
function that determines if sufficient 
resources exist to fulfill the request. 
Second, the switch needs to ensure the 
requesting user is authorized to make 
the request. 

Typically, the switch can make the 
admission control decision locally. But 
the device most likely will need to con- 



bandwidth is available 



suit a policy server — a 
PDP — for a policy con- 
trol decision. Without this 
consultation, a situation 
could occur in which the 
first RSVP request gains 
all the switch's available 
bandwidth, and subse- 
quent requests arc denied 
until the first requestor's 
session ends. 

Here's where COPS 
makes a real difference. 
T hrough the already-open 
TCP connection — COPS 
opens a connection as 
soon as a PDP or PEP 
device boots up — the 
switch consults the serv- 
er through a COPS mes- 
sage. Each COPS message 
includes client-specific in- 
formation along with the 
actions the requestor is 
asking the target device 
to perform. 

Carried within these 
messages are objects of 
variable lengths that carry 
the necessary information 
to complete the message. 
In the first Request mes- 
sage, for instance, one or 
more COPS-cncapsulatcd 
objects might be used to 
identify the client and 
define the type of event 
that triggered the query. 
And in the Response mes- 
sage, a "decision object" 
would carry the actual 
policy decision. 

In all, the COPS protocol allows for 10 
message types, from Request and 
Response to Report State, Synchronize 
State, Client-Accept and Client-Close. 
Upon device start up, for instance, a 
newly booted switch typically issues a 
COPS request to begin tracking the state 
of this particular PEP Another message, 
Keep-Alive, is issued periodically in 
order to determine if a PEP or PDP has 
become inactive. 

Through the combination of this sim- 
ple message set and the encapsulated, 
client-specific objects, COPS is thus able 
to track and update the states of numer- 
ous PEPs and PDPs, without requiring 
undue administrative overhead. 

Network vendors and users expect 



HOW IT WORKS 

Common Open Policy Service 

COPS is a simple query-and-response protocol that 
relies on TCP/IP as its transport mechanism. COPS' 
essential function is to carry messages back and forth 
between a policy server and its various clients. The 
idea of COPS is to ensure that policies are enforced 
across an enterprise network. 



Policy server 



O An end user with a video 
application requests a network 
connection from the Policy 
Enforcement Point (PEP) switch 




Directory 



PEP switch 



© COPS carries the request to 
the policy server. The server 
consults a directory server in 
order to authenticate the user 
request, and it looks at its own 
state tables, which are regularly 
updated by COPS, to see 
if sufficient end to end 



» — " 



O The policy server makes its 
decision, then issues a COPS 
response message to indicate, in 
this case, approval. The PEP switch 
permits the application to begin. 



I 



Request 




COPS to play a key role within the 
evolving industry framework for policy- 
enabled networks. 

Such a framework will make use of 
several protocols — including but not 
limited to Lightweight Directory Access 
Protocol for directory access; Remote 
Authentication Dial-In User Service and 
DIAMETER for user authentication; 
SNMP for client/server communica- 
tions in older networks; 802. Ip for IAN 
priority; and Differentiated Services for 
WAN priority. 

Cookish is director of marketing for 
tbe Network Management Division of 
3Com. He can be reached at 
Michael_Cookish%3Com.com. 
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Gearhead — inside the network machine . Mark Gibbs 



Slick multimedia content with a minimum of fuss 



Way hack in June, Net- 
work World ran an article- 
called "Multimedia with a SMB.* 
(www.nwfusion.com/intranet/0629 
handhook.html). 

Gearhead is impressed with what 
has been happening implementation- 
wise since that story was penned. 
Back then, the only tool that could 
render Synchronized Multimedia In- 
tegration Language (SMIL) content 
effectively was the G2 RealPlayer front 
RealNetworks. 

(Note: If you haven't checked out 
the G2 RealPlayer, you are missing out 
on a remarkable piece of software. Not 
only can the product deliver excellent 
streamed audio content, but it also 
handles video remarkably well and full 
SMIL specification with ease. In partic- 
ular, check out www.netradio.com for 
a large selection of continuous music 
channels.) 

SMII. is pronounced "smile" and 
was developed by the World Wide 
Web Consortium. The technology was 
released June IS, 1998 (www.w3. 
org/Audio Video). 

SMIL allows you to create presenta- 
tions in multiple media formats and 
Synchronize the various media to 



ensure that things happen when they 
are intended to. The beauty is you can 
use a simple text editor to orchestrate 
the events. 

Now why should you care about 
SMIL? Because it is the easiest way to 
create slick, multimedia content with 
a minimum of fuss. 

Moreover. SMIL presentations are 
much less of a bandwidth hog than 
full video, while being more media 
rich than just simple audio with back- 
ground sound. SMIL has applications 
for teaching, sales presentations and 
anything else where a complex mes- 
sage needs to be delivered with a min- 
imum of fuss. 

SMIL content (at least according to 
the standard found at www.w3.org/ 
TR/REC-smil) can include URL links. 



streamed and unstreamed audio and 
video, as well as text. Note that SMIL 
doesn't define which media types can 
be used, it just defines a framework for 
them that controls timing and screen 
layout (both position and ordering — 
for example, which media elements 
overlap). 

Some of the demonstrations are 
impressive. Gearhead really liked 
"Porsche History" created by Cari- 
biner International at http://ram 
hurl.real.com/smildeinohurl.html? 

filc=smil/cntertainment/porsche/ 
porsche_start.smi.and "Tour the Getty 
Center," by RealNetworks at hup:// 
ramhurI.real.com/smildemohurl.html? 
file=smil/entertainnient/getty/getry_st 
art.smi. 

Since last July, a number of SMIL 
players have been released — several 
ol them as Java applets and many of 
them free. We tried out one of the 
newest, the SMIL Output in Java 
Applets (SOJA) Chcrborg from Helios 
(ww-w.helio.org). We'd love to be able 
to tell you more about Helios, but all 
we could find out is that it is an asso- 
ciation in Melun. France. 

SOJA Chcrborg is Helios' most 
recent release of this all-Java SMIL 



player, and it is free. You can download 
the software from www.helio.org/ 
prod ucts/smi l/do wnload/soja- 
chcrhourg.tar.gz. 

SOJA presentations are embedded 
in the browser window and can han- 
dle (ill- and JPEG images. AU and 
zipped AH formats, and plain text files. 
We tried out SOJA with a number of 
SMIL presentations and found it 
worked flawlessly. And, by golly, the 
price is right. 

Another SMIL player that impressed 
us is SMlLEbaby, a free-for-personal-use 
Java applet that is in beta release 
(http://cr5i8337-a.yec 1 .on. wave. 
home.com/SMILEBaby). 

SMlLEbaby is a lightweight player 
— it only works with JPEG image files 
and mono sound, which makes it 
small and fast-loading. 

Even so, it works very well, and a 
neat demo can be found on the 
SMlLEbaby site (note that this is 
a Sun promo for Pure Java — it's 
mildly amusing) 

SMIL is definitely a technology to 
keep your eyes and ears on. 

Media madness to gearhead® 
gibbs.com. 
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;e-OTT! WTtere 
to buy your LAN gear 

With some vendors ex- 
panding to offer a full range 
of enterprise gear, deciding 
from whom to buy your LAN 
equipment can be confusing. 

Do you go with a full-spec- 
truni equipment provider or 
stick with a IAN specialist? 
Executives from 3Com and 
Extreme Networks will be 
online this week to battle 
over your dollars. Get your 
questions ready, then head 



News, tips and 
tools from our 
Web site 

over to: 

DocBnder: 2829 

Has this happened to 
you? 

Last week. Executive Edi- 
tor Beth Schultz described 
the problems one end user 
had downloading Portable 
Definition Format files from a 
corporate extranet because 
he didn't have the appropri- 
ate reader software. 

Readers reacted to that 
story in different ways. 



One said, yes, IS has to 
think like an end user. But 
another said:"The reason that 
corporate IS usually doesn't 
install anything on your 
machine' is because users go 
off and find poorly written 
screen savers or cutesy toys 
that end up corrupting their 
systems. They then scream at 
IS because their machine 
doesn't work." 

What do you say? 

DocFinder: 28.16 

E-mail as trespassing? 

You may have read how a 
California judge recently- 
ruled that spam is a form of 
trespass, and Intel has the 
right to pursue charges 
against an ex-employee who 
was sending mail to its 
workers via the company- 
mail server. 

What do you think? Should 
the former employee have 
the book thrown at him. or 
would that be a violation of 
his First Amendment rights? 



Join our discussion at: 
DocFituter: 2828 

Behold the future 

What wondrous things 
does the future hold for your 
network? Well, maybe not 
many, if you ask our more- 
dour readers. 

Sure, some folks agreed 
with our predictions that 
desktops will die and 
wireless will rule. But 
others in our future forum 
disagreed. 

One reader, for example, 
says we ignored inertia — he 
thinks systems and people- 
are just more resistant to 
change than we'd like. 

"I'll expect wearable com- 
puters to become pervasive 
the day I get my dress shirt 
back from the cleaners with 
the collar creased properly," 
he says. 

What do you think? 

Gaze into the future with 
us at: 

DocFlnder: 2827 



Constitutional right to 
online privacy? 

Network World columnist 
Ira Brodsky says he has had 
enough of online people 
whining about privacy ero- 
sion. The Constitution docs 
not mention "privacy" at all. 
and if you don't like your per- 
sonal information becoming 
public online, then don't use 
the Internet, he says. As you 
might expect, some people 
disagree. See what they say, 
and how Brodsky replies. 

Doc Finder: 274 1 




Ron Nutter is standing by 
to answer your network 
questions. Read his col- 
umn every week on 
Fusion. 
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the new thinkpad 570. (dramatization) 



ThinkPad" 570 



(g>e-busi 



i t<M)ls 



from 1" thin- / 4.0 Ibs7 12.T or I3.3"active matrix display 
$2,699' 4.0gb or 6.4gb hard drive / 64-192mb sdram 

mobile Pentium" II processor 300PE / 333 / 366 mhz 



holds floppy drive or extra battery 
and options like CD. DVD, Zip, extra 
hard drive; or SuperDisk LS-120 



This is how it works Slip the ultrathin. ultralight ThinkPad 570 into 
an UltraBase and it transforms into an all-in-one desktop ready for 
the office or the road, ibm.com/thinkpad 800 426 7255. ext. 4203 
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Editorial Insights 

NetWare as a leading apps 
platform? Get used to it 

Bill elates' repositioning of Microsoft 
for the Internet is the Stuff Of busi- 
ness magazine legend. The restless 
software c/ar. stung by upstart Net- 
scape, turns his empire on a dime to face the 
Web challenge Stirring. 

Hut there's another Internet 
repositioning act going on 
that may prove ev en more 
impressive. Novell CEO Eric 
Schmidt has dragged NetWare 
from its defensive jxisition as 
an NT-ravaged also-ran to a 
bright future as a hard-core 
Net applications platform 
And given die evolution of 
lava and c-commcrcc, Schmidt 
and Nov ell are heading for the 
sweet spoi of i he market. 
It's hard to grasp the- idea of NetWare as a 
robust applications server I know — I cov- 
ered the announcement of AppWare more 
vears ago than I care to remember. NetWare 
was always hamstrung by its Inability to sup- 
port applications. 

But that's changing — dramatically NetWare 
5 is a fast engine for Web applications, and 
Novell is going beyond performance by making 
NetWare a heck of a development environment. 
It has bundled Oracle Hi. IBM s WebSphere and 
Netscape Enterprise Server. The company also 
plans native HOP support and clustering and 
multiprocessing enhancements W ith a strong 
directory, management tools arid caching ser- 
vices. Novell has crafted a very capable platform 
for the network-centric applications that a 
grow ing number of developers and enterprises 
are- building .And NetWare is only going to git 
better in the months (vears?) before the bloated 
Windows 2000 arrives 

A big challenge for Novell is that many cus- 
tomers don t buy an operating env ironment 
simply because it is the fastest or most open. 
They buy it because a particular application 
runs on it. That's where Microsoft's strong ties 
to enterprise applications providers and the 
top software makers .ire so important. Novell 
should cultivate stronger relations with devel- 
opers, but time and technology will aid the 
cause, as well. More software companies are 
building for the open Web environment, and 
that will bring the weight of their develop- 
ment efforts over to Novell's side. 

Novell is somewhat reluctant to boast 
about NetWare's new application strengths 
because it doesn't want to go head-to-bead 
against Microsoft during this rebuilding 
period but that should change. It's too good a 
story for Novell to keep to itself. 

— Joint Gailant 
jgallantwnww.com 
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Advice to Cisco 

Your article "Cisco's voice plans lead to tele- 
phony throne" (April 19, page 56) is a blatant 
example of how blind the data world is to the 
real world of business telephony. I agree that 
Cisco is building a formidable empire and 
already has a firm foothold in the telephony 
arena. However, Cisco must make some drastic 
changes in its approach to telephony before it 
can provide any kind of viable replacement to llie 
modem l'BX. 

So far Cisco's approach has been to provide basic- 
voice connectivity only. I have seen no move toward 
providing any of the features that have been the 
actual motivators for purchasing or upgrading 
switching equipment. 

'lTiere are three problems that Cisco either is over- 
looking or mistakenly thinks have been overcome. 
The most important of these is reliability at the desk- 
top level. End users will never be satisfied with 
telecommunications that supply even the same relia- 
bility as the best operating systems on the market 
today. We think nothing of rebooting a PC, but try 
telling someone Uicy have to reset their telephone. 

Functionality is the next major issue. Users expect 
PBXs to be unique right down to the feature buttons 
and messaging on telephone displays. Having dial 
tone at the desktop and inexpensive long distance is 
nice, but users want to be able to multitask and 
work with their phones. 

Finally. Cisco isn't all that price competitive in this 
arena.A small router to connect two sites widi stan- 
dard telephones via frame relay is actually quite a bit 
more expensive than a feature-rich PBX connected 
via aT-l.The only savings might be realized over time 
because frame relay is typically less expensive than a 
dedicated T-l. 

1 am extremely impressed with Cisco's focus on 
convergence. I also believe Cisco would lie better off 
developing the foothold it has in providing the best 
possible WAN connectivity for PBXs. 
Russell Wynne 
Engineering manager 
UNITEL 

Grand Junction, Colo. 
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Take a number 

I strongly disagree with Mark Gibbs'"no 
naming convention" idea ("A site by any other 
name," April 19, page 82). 

In the business world today, having a good 
name on the Web is like having another busi- 
ness card. 

Would you rather have your sales representa- 
tives say: "Please check out our demo at 
http://demo.companyname.com" or "You can get 
our demo at http://32 16549870"? 
Why in the world would we want yet another 
number to memorize? Nobody wants to be just 
another digit in a pool of digits. I also think the 
likelihood of making a mistake when you type- 
one of these numbers is very high. It would be- 
exactly like dialing a wrong number and just as 
annoying. 

We have quite a bit to lose by converting to such 
a convention and nothing to gain. Seventy-five 
bucks for two years' ownership of a name is well 
worth the price. 
WW Reinbardt 
Internet sen-ices manager 
Bristol Hotels and Resorts 
Dallas 

There are a few problems with Mark Gibbs' idea 
about referencing Web sites by IP addresses rather 
than names. 

What if a company's IP block changes? Getting 
information updated on a search engine can take up 
to six months: a Domain Name System (DNS) change 
takes roughly 72 hours. 

What about e-mail? A message sent to www. 
gibbs.com may go to the IP 216. 101 .69.2, but what 
if you had a record in your DNS that routes all 
e-mail to 216.101.69.3? Many large companies do 
this. Or what if www.gibbs.com was different than 
mail.gibbs.com and ftp.gibbs.com? 

Although I don't like domain name registrar 
Network Solutions, Inc. much, the naming conven- 
tion is nice. 
James Bailey 
IS director 
eCompany 

Corona del Mar, Calif. 
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Intranet Adviser . Daniel Blum 

Bridging the gap between NOS and enterprise directories 




lith its recent announcement of enterprise 
I directory capabilities for Novell Directory 
' Services Version 8 (NDS), Novell has come 
off the ropes to battle Microsoft, Netscape 
and other companies for corporate directo- 
ry dominance. 
NDS 8 is the first product that begins to bridge 
the gap between enterprise and network operating 
system (NOS) directories.Typically, enterprise direc- 
tories are relatively centralized and information rich, 
whereas NOS directories are highly distributed and 
information poor. 

NDS is firmly entrenched in the NOS directory cat- 
egory. And with ZENworks and NDS for NT, Novell 
has augmented its NOS product line with cross-plat- 
form, directory-based management tools. 

In addition, with its BorderManager firewall and 
Internet Caching System, Novell has entered the 
lucrative market for electronic commerce "boundary" 
products. But until now, NOS-centric NDS has had 
trouble competing effectively with Netscape's 
Directory Server for e-commerce director)' business. 



Moreover, Novell has had to fight a war 
of words with Microsoft, which has 
positioned its yet-to-be-released Active 
Directory as an enterprise directory as 
well as a NOS product. 

Several key enhancements make 
NDS a contender for the enterprise and 
e-commerce directory environments. For example, 
Novell has reworked the NDS database engine to 
enable very large partitions. 

In addition, Novell has announced plans for a 
Digitalme profile applet that customers or partners 
can fill out in their browsers. This kind of self-service 
directory update helps keep content fresh and low- 
ers administration costs. 

However, for NDS to fully bridge the NOS, enter- 
prise and e-commerce directory worlds, NoveU must 
add or improve metadirectory tools, public-key infra- 
structure support, catalog integration and native 
Domain Name System support. 

The good news for Novell is that while much 
remains to be done, the company has at least a six- to 



12-month window before Windows 2000 
rolls out. But even then, the first release of 
Active Directory will lack many enterprise 
directory capabilities, such as metadirecto- 
ry services and multiple-schema support. 

Customers, especially NetWare users, 
should seriously consider piloting NDS 8 
over the next few months. If it proves itself ready, try 
to deploy at least a test installation of the product on 
your network prior to your Y2K freeze. Not only will 
NDS 8 and NetWare 5.0 offer some attractive 
enhancements, they'll also give your organization 
valuable experience with a directory-enabled envi- 
ronment.And you'll have the opportunity to find out 
whether it's now possible to bridge a single logical 
directory across the NOS, enterprise and e-com- 
merce directory levels. 

Blum is a senior trice president and principal con- 
sultant with The Burton Group, an IT advisory ser- 
vice providing in-depth analysis for network plan- 
ners. He can be reached at dblum@tbg.com. 



Speaking the LANguage . Linda Musthaler 

Appliance servers make single-tasking a specialty 




9 



I hen I got up this morning, I brewed a pot 
I of coffee and made some toast.These 
actions required two distinct appliances, 
and because I used these highly special- 
ized machines, the results were excellent. 
My coffee was fresh and hot, and my toast 
just slightly brown, the way 1 like it. 

Ever)' computer vendor with an ounce of fore- 
sight seems to have awakened to this notion of 

using a highly specialized 
machine to perform just 
one or two functions, and 
to perform them very well. 
Since January, there has 
been a wave of announce- 
ments about the category of 
computer called an appli- 
ance server, or a thin server. 

An appliance server is a computer with a very 
focused purpose. It's usually meant to do just one 
task, and do it with superior performance and high- 
er reliability than a general-purpose server. 'though 
this might sound a like a new concept, it has been 
around for a number of years. For instance, Cisco 
made its fortune by creating a computer that did 
nothing but route data packets around a network. 
Other functions that are ideal for appliance servers 
include file storage, data serving, Web caching, secu- 
rity and messaging. 

Another key feature of an appliance server is that 
it is a turnkey product.The computer that you pur- 
chase must already contain the operating system and 
application instructions, tuned and ready to perform 
the intended task. You just plug it in and let it go. 
What a joy for tired network managers who are 



accustomed to hours of cajoling general-purpose 
servers into suiting their needs. 

If there's any doubt about appliance servers being 
the next big thing, just look at the stunning growth 
and financial performance of Network Appliance 
(NetApp), a company dedicated to developing and 
marketing network data servers. Since 1994, NetApp 
has grown from two dozen or so employees and rev- 
enue of $2.2 million to close to 500 employees and 
revenue of $166.2 million. 

NetApp isn't the only computer company to tap 
the appliance server market. Novell is making a very 
strong comeback with its Internet Caching System 
(ICS) technology. Companies such as Compaq and 
Dell have licensed ICS to create new appliance 
products that will speed access to Web pages by 
caching frequently used information and placing it 
closer to the users. 

Of course, Novell isn't the only player delivering 
Web-caching products. I predict these types of thin 
servers will be almost as common as routers within 
a few years. It will be inconceivable to have a net- 
work configuration without one. With Wcb-bascd 
information increasingly coming in the form of 
audio and video, and with thousands of new users 
jumping on the Internet each day, Web caches seem 
to be simple solutions to bandwidth constraints and 
sluggish performance. 

Appliance servers arc a boon to small companies 
that don't have a dedicated IS group. How many 
owners of florist shops and dry cleaners are savvy 
enough to shop for a general-purpose server, select a 
network operating system and application software, 
install and configure it all, and get the desired pro- 
ductivity gains, all for a few thousand dollars? 




Now these entre- 
preneurs can buy a 
small business serv- 
er in a sealed "black 
box," bring it home 
and plug it in. 
Within as little 
as 30 minutes, 
the server can be 
connected to a 
few dozen PCs 
and delivering ser- 
vices such as e-mail, 
Internet access and 
shared print and 
file services. 

Whatever your company's size, your network can 
find a performance edge today with the various types 
of appliance servers pouring into the market. Use 
them to speed access to Web pages, serve data from 
disparate sources, manage the tide of mail for thou- 
sands of users and secure access to your network. 

But we're still in the early phases of this stage of 
network computing. The big advances will come in 
a few years when you can purchase an entire enter- 
prise resource planning system as an appliance. That 
might sound laughable now, but who would have 
thought a few years ago that you could buy a simple 
box with a full network OS and complete suite of 
applications — read) - for use right out of the carton 
— for under $2,000? 

Musthaler is vice president of Currid & Company, 
a technology consulting firm in Houston. She can 
be reached at linda@currid.com. 
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You bet your char-broiled 
buns they don't! 

Monitor the slightest ripple on any network 
component with LogCaster® 

Get the whole truth... 

LogCaster® is the first and only real-time monitoring program that 
meets virtually all industry standards. With LogCaster you get a Superset ' 
program that monitors your applications, hardware, and system 
administrative functions - making sure your network is secure and running 
at peak efficiency. 

Finally a single affordable software program that has it all! LogCaster* 
monitors the Windows NT* Server event logs, takes corrective action when 
necessary, and notifies you if any component on your network or system is 
not operating efficiently or there is unauthorized activity. Comprehensive 
and easy to manage, it is also adept at TCP/IP monitoring. For more 
information or to order, call (215) 321-9600, or visit us at: 
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RippleTech 

NOTHING BUT THE TRUTH 



RippleTech. RippleTech logo and LogCaster are registered trademark! of RippleTech. Inc., Washington Crossing, PA, (215) 321-9600 Windows NT is a registered trademark of Microsoft Corporation. 

Free Product info enter NWInfoXpress #65 online @ www.networkworld.com/lnfoxpress 
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Is it better to buy from a LAN specialist 
or a full-spectrum equipment provider? 




BY GORDON STITT, 
EXTREME NETWORKS 

Vendors that focus primarily on LANs can provide 
you with a flexible, high-performance infrastructure at 
a low cost of ownership. It is a myth that large, full- 
spectnim network companies can provide end-to-end 
offerings that will cover all aspects of the enterprise 
well. Most full-spectrum companies have grown 
through acquisitions and offer inconsistent products 
that are significantly more expensive to own and do 
not provide strategic advantages. 
In the past, full-spectrum network companies used proprietary protocols to link 
various parts of the enterprise. Today, IP is the only protocol that matters. Ethernet, 
routing and layer 3 switching are the technologies for IAN interconnection, and 
most suppliers support standards for Ethernet and Layer 3 switching Consequently, 
users don't need the "breadth" of a full-spectrum network company to design, 
install and run an enterprise LAN. Instead, users can benefit by choosing vendors 
that provide the best products and then interconnect them. 

This situation places the large, full-spectrum network companies at a sudden dis- 
advantage. These companies have grown by acquiring smaller network companies. 
As a result, many full-spectrum vendors now provide a complex mix of equipment 
that consists of products from many different companies. These large suppliers 
then spend most of their research and development on integrating newly acquired 
products, radier than on innovation. Customers pay the price for this complexity in 
the form of a liigher cost of ownership and integration delays. 

In contrast, a LAN-focused company Ls in control of its vision and product archi- 
tecture. It can provide a consistent cnd-t<K'nd enterprise IAN infrastructure that is 
much simpler, more powerful and far more scalable for future and existing applica- 
tions, such as enterprise resource planning, electronic commerce and voice over IP 
The results are lower cost of ownership and a huge business advantage. 

So how do you decide whether to go with a small IAN specialty vendor or a 
full-spectrum network company? 

Look carefully for discontinuity in technology and requirements. For example, 
LAN and WAN requirements are very different. WANs have somewhat limited band- 
width and are expensive and slow to provision. LANs have large amounts of band- 
width, are easy to provision and offer lower bandwidth costs. You should choose 
the best products for these distinct areas. 

IAN specialty vendors are well-equipped to develop the best technologies. They 
are able to embrace new technologies, such as Gigabit Ethernet and Layer 3 switch- 
ing, with speed and efficiency. And they are poised to deliver products to cus- 
tomers much more quickly. Businesses that adopt these new technologies can gain 
a tremendous advantage over competitors that do not. 

Recognize the discontinuities and the natural point 
of demarcation between LANs and WANs'lhen choose 
the best products in each area to meet your specific 
needs. And instead of negotiating wiUi one company for 
all your network products and services, you'll be in a 
much stronger bargaining position by introducing spe- 
cialty vendors into your supplier mix. 

Stitt is president and CEO of Extreme Networks, a 
Santa Clara. Calif, manufacturer of Gigabit Ethernet 
Layer j LAN switches. He can be reached at 
gstiWSextremenetu tirks. com. 





BY ANDY GOTTLIEB, 3COM 

Relying on a LAN specialist — typified by the high- 
tech start-up — can be tempting if you base your deci- 
sion on product specifications alone. And in a world of 
standards, the specialty start-ups brag that their hot 
boxes can fit seamlessly into any multivendor environ- 
ment. But good product specifications and standards 
compliance are only table stakes, the minimum 
requirements to get into the game for small and large 
vendors alike. 

As networked applications become more and more 
important to your company, broader issues than speeds and feeds emerge.To ade- 
quately address these issues, you need a large, full-spectrum vendor that offers a 
complete systems approach to the IAN, depth of experience, breadth of customer 
service and support, and the full range of WAN and remote access products that 
complement the LAN. 

There's a growing need for a complete systems approach to the LAN. Vendors 
must offer the broadest range of products to satisfy a user's total needs. Single-ven- 
dor technical commonality among these products simplifies operations and future- 
proofs your network against complete swap-outs as, for example, the IAN core 
grows. Small vendors cannot match the choice of scalable, compatible, commonly 
managed products from full-spectrum vendors. 

Ihe depth of a vendor's experience is built over time, over thousands of cus- 
tomers. Ilie full-spectrum vendor's deep pockets provide a broader selection of 
customer support programs, including a menu of services to fit every budget. 

Full-spectrum vendors are better equipped to trouble-shoot problems as well. 
Because applications today span entire enterprises, what appear to be IAN prob- 
lems may actually be symptoms of WAN, remote access, carrier, ISP desktop or serv- 
er problems. Having a vendor that thoroughly understands issues beyond the IAN 
will make your life easier. 

And being able to reach your vendor for help becomes essential as well, especial- 
ly when your mission-critical network hits a glitch at 3 a.m. Full-spectrum vendors 
can provide customer support with live technical representatives manning the 
phones 24-7 across the globe. IAN specialty shops may only be able to offer 
restricted business-hour live support due to limited resources. 

Because IAN specialty vendors are focused on only a slice of the user's prob- 
lem, they have very limited offerings and don't have the proper resources to help 
users migrate to next-generation networks. Case in pointThc industry is evolving 
toward converged networks — the ability to run voice, video and data over the 
same infrastructure. Full-spectrum equipment providers had the resources to 
identify and act on this trend several years ago, and planned their product, ser- 
vice and support strategies to accommodate this evo- 
lution. As a result, only full-spectrum vendors can offer 
a comprehensive, safe and smooth migration to next- 
generation networks. 

It's an understatement to say dial the health of your 
network is critical to your company's success. Plan for 
the long term, and think long and hard about the LAN 
vendors you select. In today's high-speed business 
world, short-sightedness can lead you into a brick wall. 

Gottlieb is JCom 's rice president of large enter- 
prise systems marketing He can be reached at 
andy_gottiieb@3com.com. 
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A MARKET DIVIDED 



BY JOEL SNYDER 

Business is booming for virtual 
private network (VPN) ven- 
dors. Every week, it seems, we 
receive word of a new prod- 
uct to add to our VPN watch 
list. Unfortunately, though, the 
VPN market is as fragmented 
as it is populated.While you'll 
have no trouble finding products 
to encrypt traffic and build pri 
vate networks, there's no single 
solution that will solve all your problems — 
linking remote users to corporate LANs, 
building secure tunnels to branch offices and 
trading partners over the Internet, and 
encrypting sensitive internal traffic. 

The bulk of the VPN market is focused on 
tunneling and encryption. Other features, 
such as quality of service, which might make 
sense for vendors to build into a VPN pack- 
age, are generally not bundled with them. 
This makes life harder for network managers 
who want to build a true private network, 
but easier and less expensive for those who 
need just one feature, such as encryption. 

Without universal agreement on how t< i 
build VPNs, vendors have divided into 
three camps based on layers 2, 3 and 4 of 
the seven-layer OSI reference model. We've 
sorted out many of the details, including 
price, in our interactive buyer's guide 
(www.nwfusion.com, DocFindcr: 2825). 
We'll continue to update this online 
resource, containing Information on 
more than 50 prtxlucts. 

At the lowest level. Layer 2 VPNs 
encapsulate IP protocols as well as non- 
IP protocols, such as IPX and AppleTalk 
They also provide platform indepen- 
dence because client systems typically 
don't require special software or hard- 
ware other than a d i.i I in networking 
adapter. However, layer 2 VPN technol- 
ogy is aimed at the remote telecom- 
muter, not the branch office, and lacks 
the flexibility that some LAN-to-LAN 
managers need. 

Layer 2 VPNs include products based 



VPftl products run the gamut from simple 

encryption devices to multiprotocol 
tunnelers. One commonality is a lack of 
management finesse. 




on the older protocols. Layer 2 Forward- 
ing (I.2F) and Point-to-Point Tunneling 
Protocol (PPTP), as well as the new stan- 
dard that replaces them both. layer 2 
Tunneling Protocol (1.2TP). 

We expect to see growth in this seg- 
ment as the Ciscos and 3Coms of the 
world sell I.2TP products to ISPs and 
phone companies, but little of the 
growth in Layer 2 VPN sales will come 
from the corporate side. Enterprise net- 
work managers will instead spend their 
money on maturing Layer 3 VPN tech- 
nology for branch-to-branch and extra- 
net networking. 

While layer 2 products encapsulate all 
protocols in IR layer 3 products encapsu- 
late IP in IRThe Layer 3 VPN market today 
revolves around IP Security (IPScc), the IP 
encryption, authentication and tunneling 
protocol standardized by the Internet 
Engineering Task Force. Earlier encryption 
and key exchange standards, such as Sun's 
SKIP are being replaced by IETF versions. 
Products based on IETF standards benefit 
from a rigorous peer review by the best 
minds in the business, which is particular- 
ly important when it comes to encryption, 
the cornerstone of these VPN products. 

Standardized IPSec VPNs also provide 
the ability to mix and match vendors. In 
theory, you can choose client software 
for PCs, Macs, and Unix systems, branch 
office VPN hardware, and central site 
VPN hardware from different sources, 
playing on the strengths of each vendor. 
Our first-hand Interoperability tests, 
however, suggest that you can't take ven- 
dors' claims of interoperability for grant- 
ed (see graphic, page 92). 

Like their lower-layer brethren. layer 4 
VPN tools are basically encapsulating 
encryptors. However, products at this 
level are often tied to a single application, 
such as e-mail, (limmon implementations, 
such as HTTP over Secure Sockets layer, 

are present in every browser — Type 
| https:// and you're using a layer 4 
| VPN. Encry pted e-mail, or Simple Mail 
5 Transfer Protocol ovcrTransport layer 



Inside 

Review: In out tests ol 1 5 VPN products, 
Radguard's cIPro System 3.30 won the Blue 
Ribbon Award lor its unbeatable inter 
operability and competitive speeds 
Page 88. 

Interoperability on trial: Which products 
really work with each other' Page 92. 

Choosing a VPN product: Don't forget 
management and reporting capabilities when 
you're shopping for VPN vendors Page 92. 



Online 

Interactive Buyer's Guide: it's not easy keeping track of which vendors have what features in the explosive VPN market. We've done the leg work 
for you and collected product specs from 32 VPN vendors. Find the ones that can satisfy your security needs, management desires and budget restrictions. 
www.nwfusion.com, DocFinder 2825. 



3Com 

Alliga Networks 
Ascend 

Assured Digital 
Axent Technologies 
Check Point Software 
Cisco 
Compaq 



Compatible Systems 

Cybernetica 

Data Fellows 

E Lock Technologies 

FreeGate 

Fortress Technologies 

IBM 

Intel 



Internet Devices 
Internet Dynamics 
Lucent 
Microsoft 

NetScreen Technologies 
Norman Data Defense Systems 
Nortel Networks 
Novell 



Radguard 

RedCreek Communications 
Secure Computing 
Sonic Systems 
Technologic 
TimeStep 

VPNet Technologies 
WatchGuard Technologies 



Network World May 1 0, 1 999 www.nwfusion.com 85 

Copyrighted m 



Buyer's Guide 



Security, and encrypted shell using the semi-proprietary 
Secure Shell protocols are continuing to spread. 

With commodities come choices 

But the bulk of the VPN market is the Layer 3 prod- 
ucts.They re everywhere, packaged in routers, fire- 
walls, software, and dedicated hardware. And though 
VPN standards and implementations are complex, this 
complexity is hidden from the network manager, leav- 
ing lirde evidence to differentiate products, even 
across different platforms. 

The most obvious distinction among VPN products 
Ls in the management interface. Right now, manage- 
ment utilities arc the weakest part of Layer 3 VPN prod- 
ucts. Most vendors require you to handle each VPN 
device separately, which is OK when you have two 
sites to connect but impossible when you have 200. 

Vendors such as Internet Dynamics, VPNet and 
Check Point Software offer good tools that allow you 
to manage multiple VPN sites from a single manage- 
ment domain. Similarly, the ability to handle hundreds 
or thousands of remote users gives vendors such as 
Intel and Microsoft a chance to shine. We expect to see 
more vendors catching on and better management 
tools beginning to appear over the next year. 

Layer 3 VPNs are inherently simple, which makes it 
difficult to add bells and whistles. While IP compres- 
sion — which is a standardized way of compressing IP 
traffic before the encryption scrambles it — would 
seem to be important, it hasn't become a universal fea- 
ture. About one-third of the products included in our 
online features chart support compression. 

Other additional features are rare. Newcomer 
Network Alchemy (whose products don't ship until 
June, when they will be added to our online chart) is 
the only vendor we surveyed that includes load sharing 
and clustering in its VPN products. 

One reason for this shortage of distinguishing fea- 
tures might be due to the large number of VPN ven- 
dors. Stiff competition is driving product managers to 



Reader RFP gets results 

Last month, we asked readers interested in building 
a virtual private network (VPN) to send in their 
requests for proposal {RFP). Theresa Brummett Irom 
Powell Electrical Manufacturing Co. was selected to 
have her RFP answered by our VPN Buyer's Guide 
vendors. Brummett has been charged with swapping 
out her 400 person company's remote access server 
for a brand-new VPN. 

Brummett has several Brft*ti3l3B 
requirements for her new [WI01I -E EE HOMUSIOH 
VPN: central manage- - v 
ment, fault tolerance, Blinl flTj^fflij 
99% uptime, secure ^^^^^^^L^^^^H 
authorization and comprehensive logging. 

To find out what our Buyer's Guide vendors 
recommend, head online to Network World Fusion's 
RFP Central. You'll find Brummett's RFP, her network 
diagram and detailed vendor responses, including 
products and pricing, from the likes of Intel, Microsoft, 
RedCreek and Radguard. Feel free to add your two cents. 

Could your Web servers use some load balancing? 
If so, let us get some answers for you from our Web 
server load balancing Buyer's Guide vendors. Send 
your RFP to sgittlen@nww.com. 



push sales rather than spend resources on major prod- 
uct upgrades. 

On the plus side, the increasing number of products 
has put a great deal of downward pressure on prices. 
Some hardware-based vendors, such as Intel, Nortel 
Networks, Lucent, and VPNet, have opted to use largely 
off-the-shelf PC hardware as the core for their products, 
in order to cut design costs and decrease the time it 
takes to get a product to market. 

Ultimately, though, we think hardware vendors who 



have taken the time to design their own equipment, 
such as Radguard, RedCreek andTimeStep, will have 
the advantage in a price war. Once the design process 
is complete, production is less expensive because 
these vendors aren't paying for unnecessary parts. 

You might think software-based VPN vendors would 
have huge profit margins. However, network managers 
are well aware of the additional money they 'll have to 
spend for an NT server to house a software VPN from 
Check Point, Data Fellows or Axent, for example.This 
ancillary expense makes it impossible for software- 
based VPN vendors to corner the VPN market. 

Where's the infrastructure? 

One of the key pieces still missing in the VPN mar- 
ket Ls a true public-key infrastructure (PKI) With a 
global PKI, users can have secure communications 
without requiring a special pre-established relation- 
ship. For example, with PKI, users could send securely 
encrypted e-mail by knowing each other's address and 
little else.Without a PKI, real Internet VPNs are going 
to be limited to company-specific solutions. Even with- 
in a single company, building a trusted PKI to support 
thousands of users is a major task. 

Some VPN vendors, such as TimeStep and Check 
Point, understand the importance of a PKI in large 
VPN implementations; their products ship with a 
PKI. Microsoft, too, has quietly added PKI compo- 
nents to its Windows NT and Back Office products. 
(More than a certificate authority, a PKI also includes 
other pieces such as key request managers. See story 
online at www.nwfusion.com, DocFinder: 2826.) 

It's clear that Layer 3 VPN products are here in 
force, and organizations are learning that they can 
easily and inexpensively add military grade encryp- 
tion to their IP traffic. However, weak interoperabili- 
ty, few distinguishing features, and the lack of a PKI 
make adopting any vendor's VPN risky business. 
Despite the commodity nature of some of the prod- 
ucts, building VPNs is still an adventure. A 



VPNs: FAST, NOT FRIENDLY 
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Want to use the Internet as your 
corporate WAN, but you're worried 
about security? Don't be. We tested 15 
virtual private network (VPN) prod- 
ucts and found that all provide solid 
security for your company's Internet- 
based transmissions. 

But be prepared to make some 
tough choices, because no one product aced our per- 
formance, interoperability and management tests. If 
you're a performance fiend, VPNet sVPNwareVSLl- 
1 100 2.51 and 3Com's PathBuilder S580 will knock 
your socks off. Have to mix and match multiple ven- 
dors' gear? Radguard s cIPro System 3-30 is as com- 
patible as it gets in the proprietary world of VPNs. If 
management is your concern, Internet Dynamics' 
Conclave 1.52 is far ahead of the pack, though it has 
a lot of ground to gain in the interoperability race. If 
price is your top priority, RedCreek 's Ravlin 10/5 KM) 
3.0.2 may be the place to start. 

But wait — there's more. Want a combined VPN and 
firewall? We tested five. Want a software-only solution? 
Just pick your platform: NT. NetWare or Unix. 

We know it's not easy to narrow a field that's this 
wide. It took nearly six weeks of testing for us to deter- 



The fastest VPN products 
aced our performance tests, 
but VPN device compatibility 
gets mixed grades. 



mine our top picks. In the end, Radguard s cIPro 
earned our Blue RibbonAward.An all-around con- 
tender, cIPro set the bar for interoperability, which was 
a major obstacle for many vendors. While its manage- 
ment features are not outstanding, cIPro turned in 
near-top speeds and proved more flexible than most of 
the VPN products we tested. 

We found three devices that deserve honorable 
mentions. Placing a close second to cIPro in our Score 
Card was VPNet sVPNware. Among the top three in 
our performance tests, VPN ware delivers solid manage- 
ment features, hettcr-than-avcrage interoperability and 
good flexibility. 

Also praiseworthy are Check Point Software's VPN- 1 
Gateway Solution with VPN- 1 Accelerator Card and 
RedCrcek's Ravlin, an affordable, interoperable prod- 
uct held back only by its average performance. 



Our testing focused on site-to-site VPN products 
used to connect private LANs over an insecure net- 
work, such as the Internet. In a future test, we'll look at 
client-to-site VPN products that help secure the con- 
nection from a single low-speed system, such as a PC 
dialing into the Internet, to a corporate IAN. 

Most of the products we tested are VPN devices 
with minimal firewall features.You'U find more com- 
plex firewall technology with VPN features in some 
products, such as Intel's LanRoverVPN Gateway 6.6 
and Lucent's VPN Gateway 2.0. A few products, 



Product cIPro System 3.30 



Vendor Radguard 




Top-notch interoperability and top-tier 
speeds secured the Blue Ribbon win 
for Radguard s cIPro System 3 30 



including Internet Dynamics' Conclave, Check Point's 
VPN-1 Gateway and Axent's Raptor Firewall/VPN 
Server, are firewalls at the core with VPN features 
added. 3Com's new PathBuilder is really a router with 
built-in VPN hardware assist. And Microsoft and 
Novell have added VPN features to their existing 
operating systems. 
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How often do 
the phones crash? 
(Still think your 
datacom is reliable?) 



When it comes to mission critical services, Ericsson has been devel- 
oping and implementing carrier-class switching systems longer than 
anyone. It's this experience we're now bringing to bear on datacom 
- in the shape of a new high-performance ATM switch. 

You'll be hard pressed to find a more reliable switch than the 
AXD 301. With full system redundancy and in-service upgrade and 
expansion, your network will simply not go down. 

It's also the most scalable ATM switch around - the axd 301 is 
designed to scale from 10 Gbps to 160 Gbps. You can standardize 
all your switching needs on one system - from the massive core 
switch to the smallest node. With the AXI) 301 you 'pay as you grow'. 

And naturally it comes with complete ATM functionality, voice 
capability and a smart way to run IP traffic, making it ideal for the 
latest multi-service networks. 

Which all goes to explain why, when large carriers pick up the 
phone to order large ATM networks, they're now calling Ericsson. 
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Net Results 




Worid cIPro System 3.30 

Radguard 
(2011828-9611 

www.radguard.com/products.html 
$6,450 



Pros 

▲ Small form factor 

A Good price/performance ratio 

▲ Centralized management interface 
Cons 

▼ Initial key distribution is somewhat awkward 

▼ Requires dedicated management station and certificate 
authority 



VPNwareVSU-1 100 2.51 

VPNet Technologies 
(4081 445-6600 

www.vpnet.com/products/products.htm 
$17,995 



Pros 

▲ High performance 

▲ Nicely unified management 
Cons 

T High price 



VPN-1 Gateway Solution with VPN-1 
Accelerator Card 

Check Point Software Technologies 
(6501 628-2000 

www.checkpoint.com/products/vpnl/gateway.html 
$3,495 plus $3,995 for accelerator 



Pros 

▲ Integrated with firewall 

▲ Unified management interface 

▲ Hardware acceleration available 

Cons 

T Requires additional hardware and OS configuration 
▼ Difficult to do VPN-only configuration 



Ravlin 10/5100 3.0.2 

RedCreek Communications 
(888) 745-3900 

www.redcreek.com/products/ravlO.html 
$3,500 



Pros 

▲ Elegant form factor 

▲ Simple GUI and configuration 

▲ Very good IPSec feature set 

▲ Excellent price/performance ratio 
Cons 

T Limited to near T-l encryption speeds 



Time Step Permit Gateway 4520 

TimeStep 
(800)383-8211 

www.timestep.com/Html/ProdConGate.htm 
$5,495 



Pros 

▲ Elegant form factor 

▲ Excellent PKI integration 

▲ Good management interface 
Cons 

T Limited to near T-1 encryption speeds 
▼ Poor price/performance ratio 



F-Secure VPN+4.0 

Data Fellows 
(408) 938-6700 

www.datafellows.com/f-secure/vpn-plus/ 
$2,495 



Pros 

▲ Uses off-the-shelf hardware 

▲ Integrates with Windows NT Security Account Manager 
Cons 

T Requires additional hardware and OS configuration 
T Complex management utility is difficult to set up and use 



Contivity Extranet Switch 1500 2.0 

Nortel Networks 
(800) 466-7835 

www.nortelnetworks.com/products/ 
$7,000 



Pros 

A Easy to configure single units with Web browser 
Cons 

▼ Unit-by-unit management is slow and difficult to use 



Raptor Firewall/VPN Server 

Axent Technologies 
(301)258-5043 

www.axent.com/product/rsbu/firewall/default.htm 
$2,500 



Pros 

A Integrated with firewall 

A Unified management interface 

Cons 

▼ Requires additional hardware and OS configuration 

▼ Difficult to do VPN only configuration 
T Unit-by-unit management is difficult 



VPN Gateway 2.0 with Encryption Accelerator 
Card 

Lucent 

(888) 552-2544 
www.lucent.com/security 
S9.995 plus $3,495 for accelerator 



Pros 

A Includes firewall capabilities 
A Optional hardware acceleration 
Cons 

T Difficult management interface 



Continued on page 90 



A tough lesson in interoperability 

We take interoperability for granted with most prod- 
ucts, but VPNs are another story. As enterprises build 
huge VPNs, they'll quickly discover that no one vendor 
has a g<x)d solution for all environments and that mul- 
tivendor interoperability is key to a successful deploy- 
mcnt.Vendors who come to this realization as well 
will prosper; those who don't will wither. 

Our interoperability tests w r ere no small undertak- 
ing.As the number of boxes in the lab increased, inter- 
operability testing took longer and longer. It took 
nearly two full days for us to test the final product 
against all the other vendors' products. 

While results could vary wildly depending on the 
profiles and products tested, one thing our tests 
showed clearly was that universal interoperability is by 
no means a given (see graphic, page 92). In part, poor 
interoperability exists because vendors have not had 
many opportunities to test their products with each 
other — and because the product marketing managers 
would rather you bought everything from one source. 

Even the best product in our interoperability tests, 
Radguard's cIPro, worked with only a small subset of 
the other vendors' gear. The reason it scored well is 
because it works better than any other product we 
tested. We scored the products relative to each other, 
not against a perfect-world benchmark. 

NETW RLD INTEROP 99 

Check this out if you're at N+l: Network World Test Alliance 
member Joel Snyder is coordinating live virtual private 
network (VPN) interoperability demos for InteropNet Labs 
in the convention center's main lobby. After six weeks of 
testing VPN products for this Network World Buyer's Guide, 
he's a pro. Stop by and see for yourself which products really 
work with each other. 

Admittedly, our interoperability tests were particular- 
ly harsh. We required vendors to support Data Encryp- 
tion Standard (DES),Triplc-DES encryption algorithms 
and IP Security (IPScc), with its Internet Key Exchange 
(IKE) protocol. Our goal was to verily that different 
vendors' products could talk to each other using a com- 
mon profile, which was a real impediment for some. 
For example, Intel's LanRover product wouldn't talk to 
any other products using our selected profile, but it did 
reasonably well in a simpler fallback test. 

Radguard's clPro.VPNel'sVPNware.and Rati 
Fellows' F-Secure VPN+ 4.0 all scored well for interoper- 
ability because of their extensive logging and analysis 
features.This isn't interoperability per se; however, 
because these devices provided such good logging facil- 
ities, we were able to get them up and running with 
more products. Radier than return a cryptic error mes- 
sage — "invalid payload'was about all we got out of the 
TimeStep Permit Gateway 4520 no matter what we 
tried — these products reported a great deal of detail 
about what they saw and what they were expecting. If 
every vendor offered the quality of logging that Data 
Fellows does, our testing would have been a lot easier. 

Flexibility helped other products talk to more sys- 
tems. RedCrcek's and Nortel's gear interopcrated with 
a surprising number of products with a surprisingly 
small amount of tweaking. 

For some products, no amount of tweaking helped. 
Internet Dynamics, Microsoft and Novell failed our 
interoperability tests because they currently don't sup- 
port the security protocols we required. (Lucent is not 
part of our interoperability matrix. It took nearly two 
days for us to get Lucent 's VPN Gateway 2.0 up and 
running, despite having a Lucent technician on site. 
Because of this delay, we were unable to perform inter- 
operability testing with the Lucent VPN Gateway.) 

Private tests, such as those run by the International 



88 Network World May 1 0. 1 999 www.nwfusion.com 



Coc 



Frame Relay Plus from AT&T. 




we'll watch the network for you. Proactive network monitoring targeted to notify 
you within 15 minutes lets us alert you of problems before your users do. Plus an assigned single point of 
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Computer Security Association, generally show more 
encouraging results than we found in our lab. But 
those tests usually have product developers from both 
sides in attendance and allow a full week for the 
experts to talk to each other. Our tests present a more 
typical customer picture because we had one vendor 
representative — usually a field engineer, not a devel- 
oper — available to configure products in just a few 
hours. Having a vendor's representative on site was 
invaluable because we often had to tweak hidden vari- 
ables or debug parameters on each device. 

Our tests were also more generous because we only 
required onc-toone interoperability — we required 
each product to talk to each other product but only 
one at a time. Based on what we saw, true multivendor 
interoperability won't be as successful. For example, 
Radguard was able to get high marks by turning on and 
off the sending of vendor ID, a fairly new feature in the 
IPSec negotiations. But this feature is per system, not 
per tunnel.This means that Radguard clPro might not 
have been able to interoperate with as many vendors 
simultaneously as it could on a onc-by-onc basis. 

Speed for sale 

We asked our vendors to perform Triple-DES 
encryption in our performance tests for two reasons. 
First, Triple-DES offers military-grade security. No one 
has successfully cracked a data stream encrypted with 
Triple-DES. Second, there are readily available hard- 
ware accelerators for Triple-DES encryption . Other 
algorithms commonly supported in VPN systems, 
including Bio wfish, CAST and RCS, may be as secure as 
Triple-DES, hut can't be accelerated with commonly 
available hardware tools. 

Encryption is compute-intensive. We were amazed 
that Axent managed to pump out 8. jM bit/sec on a 
standard 350 MHz Pentium II system — and that was 
slow compared with Lucent's 30.2M bit/sec on a hard- 
ware-accelerated 300 MHz Pentium II. 

Products tested with and without acceleration 
showed dramatic differences: Intel's Pentium-based 
LanRoverVPN Gateway jumped from 2.7M bit/sec to 
8.9.M bit/sec, and Check Point's VPN-1 Gateway went 
from 6M bit/sec on a standard Sun Sparc 20 Work- 
station to 23. 1M bit/sec when we enabled the ven- 
dor's VPN-1 Accelerator Card. 

In general, if you need speed, bring money. That 's 



the lesson we learned from the superfast products we 
tested.VPNet'sVPNware and 3Com's PathBuilder blew 
us out of the water. We don't really know how fast 



they can go, except that they pegged the meter on our 
test bed. Both turned in a blistering 60M+ bit/sec of 
multistream Triple-DES encryption on a 100M bit/sec 




Net ReSllltS continued from page 88 

LanRover VPN Gateway 6.6 

Intel 

(800) 977-4482 

www.shiva.com/remote/vpngate/index.html 
$6,200 



Pros 

▲ Good integration with remote authentication system for 

telecommuters and remote access users 
Cons 

T Very large form factor 

T Difficult debugging facilities 



PathBuilder S580 

3Com 

(800)638-3266 

www.3com.com/products/dsheets/400428.html 
$29,500 



Pros 

A High performance 
A Excellent form factor 
Cons 

T Horrible command-line interface 



Conclave 1.52 

Internet Dynamics 
(805)370-2200 
www.conclave.com 
$2,495 



Pros 

▲ Elegant management interface 
A Includes policy-based firewall 
Cons 

▼ Runs on Windows NT, which hurts performance 
T Not IKE-complaint 



BorderManager Firewall Services 3 

Novell 

(801)228-4272 

www.novell.com/catalog/qr/sne34196.html 
S995 



Pros 

A Integrated with NetWare 
Cons 

▼ Does not support IKE 



IntraPort 2+ 

Compatible Systems 
(800) 356-0283 
www.compatible.com 
S9.995 



Pros 

A Multiprotocol routing 
Cons 

T Not interoperable 

T Per-client rather than per-tunnel pricing 



Routing and Remote Access Service 

Microsoft 
(425) 882-8080 

www.microsoft.com/intserver/default.asp 
Bundled with Windows NT Server 



Pros 

A No cost on top of existing NT servers 

A Integrates with Windows NT Security Account Manager 

A Supports built-in client in existing Windows systems 

Cons 

▼ Only supports RC4 encryption and PPTP 
T No support for non-Windows platforms 
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Management 
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Performance 
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Documentation 
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* We did not test interoperability for Lucent 5 is the average interoperability score for the other 14 vendors 

Individual category scores a r based on a scale of 1 to 10 Percentages are the weight given each category in determining the total score. 
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You want to see a revealing figure? Six out of io companies report that their users surf inappropriate Web sites at 
work. Which is why you should look at the CommandView product family from Elron Software. CommandView products 
can monitor, report, and block inappropriate material from the Web, newsgroups, and email. So you can identify 
Internet abuse and enforce Acceptable Usage Policies. They also let you prioritize network traffic, so important 
applications always get through. And unwanted visitors and offensive content stay C\ W%f\!^ I 
out. To order your interactive CD on Elron's best-of-breed CommandView products, visit ^Zr ^XV^^INI 

www.eironsw.com/cddemoorcaii1-800-767-6683.Wehavesomethingtoshowyou. SOFTWARE 

Maximizing Internet Productivity 

Free Product info enter NWInfoXpress #60 online 0 www.networkworld.com/infoxpress 
Elron Software Inc. • One Cambridge Center • Cambridge, MA 02142 • Tel: 1-800-767-6683 ■ www.elronsw.com/cddemo 
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Interoperability on trial 

Check Compatible Data 
3Com Axent Point Systems Fellows Intel Nortel Radguard Red Creek TimeStep VPNet 
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• Not interoperable t Partially interoperable •Interoperable 

For more details on partially interoperable pairs, see our online interoperability matrix (www.nwfusion.com, OocFinder: 2822). 

Trie products we tested from Internet Dynamics, Microsoft and Novell are not IKE-compliantand were not compatible with the 
other products we tested. We were not able to test compatibility with Lucent's VPN Gateway 2.0 because of scheduling delays. 



IAN with real world traffic. But both vendors want 
more than $16,000 per LAN. 

Unfortunately, VPNs put IP at a disadvantage.The 
additional overhead of a VPN increases the size of IP 
packetsThis causes packet fragmentation, which 
means that network resources are used inefficiently. 
Encryption also increases latency, which reduces over- 
all throughput. Our performance numbers in multi- 
stream tests represent the best throughput available in 
a low-latency, zero-loss Internet with real-world soft- 
ware at both ends. 

Even on this almost ideal Internet, adding encryp- 
tion cost us almost 30M bit/sec compared with our no- 
encryption baseline. If you put a VPN into your net- 
work, be prepared to see a lot of bandwidth disappear. 

If you want to add VPN capabilities to an existing 
firewall or server, performance is a major concern. 
Encrypting aT-1 link will eat up most of the processing 
power of an existing Pentium-based firewall, so go for 
hardware encryption or a dedicated server if you 
anticipate a significant amount of traffic. Radguard 
delivers the bandwidth bargain — you get hardware 
encryption at the lowest price-per-megabit we found. 

We tested IP compression with Nortel's Contivity 
Extranet Switch 1500 2.0 and VPNet'sVPNware. IP 
compression helps to combat the ill effects of VPN 
packet explosion. Because of the scrambling effect of 
encryption on data streams, products must apply com- 
pression before the data is encrypted, either at the 
application level or in the VPN itself. Link-based en- 
cryption yields no performance increase. 

When we tested Nortel's Contivity switch with 
compression turned on, multistream performance 
jumped from 1 1 .9M bit/sec to 26.7M bit/sec on our 
easily compressible data stream. However, VPNet dis- 
played different results: Compression dropped perfor- 
mance from a chart-topping 60M bit/sec down to 
48.5M bit/sec.We suspect that this performance loss is 
because of the overhead involved in shipping packets 
between specialized hardware encryptors and the gen- 
eral purpose CPU. 



Management: The weakest link 

We found the biggest differences in the products 
we tested to be in their management systems. With a 
couple of exceptions, the vendors have a long way to 
go in this category. 

Most vendors treat each VPN box as a separate, and 
separately managed, entity. Because VPNs are almost 
always used in pairs, this makes no sense to us. 

The worst offenders were 3Com and Compatible 
Systems. Both use a per-<levice command-line interface 
that was often overtly hostile. (Compatible Systems 
also has a graphical user interface, but the current 
release of the VPN code was not in sync with the cur- 
rent GUI. For example, the GUI we had couldn t be 
used to build VPN tunnels between devices. ) 

Axent and Nortel also failed to impress us with the 
management of their respective Raptor and Conn\ity 



products.Their devices require a completely separate 
GUI, and there's no way to share configuration infor- 
mation between two different systems. Data Fellows 
crafted a uniquely confusing management system, 
requiring no less than three different GUIs and one 
out-of-band secure channel to keep its boxes running. 

RedCreek, Radguard, and TimeStep do a better job 
of making the network manager's life easier.Although 
they treat each box as a separately managed entity, you 
can look at multiple boxes simultaneously to synchro- 
nize configurations and share common information. 
We could put up with their management GUIs for a 
small number of tunnels. 

Check Point, VPNet and Internet D>Tiamics are the 
only vendors that help network managers work with a 
VPN as a tunnel, not as two disjoint end points. Among 
these, Internet Dynamics' Conclave was the real win- 



HOW TO CHOOSE THE RIGHT VPN PRODUCT 



When selecting virtual private network 
(VPN) devices, think first about your 
existing equipment. If you want to inte- 
grate your VPN with your 3Com router 
network or your Axent firewalls, for 
example, your choice is pretty easy. 
Adding on to an existing device, though, is not 
always wise. If your firewall or router is already- 
bogged down with existing tasks, assigning VPN 
service to it will probably push it over the edge. 

Consider your management workload. If you 
plan to use the VPN for client-to-IAN as well as 
LAN-to-LAN encryption, the product's ability to 
manage thousands of VPN tunnels is critical. 
Generally, we found that the software-only ven- 
dors, including Microsoft, Novell, Internet Dynam- 
ics.Axent and Data Fellows, offer a more limited 
feature set and less control than their hardware- 
based competitors. 

However, if you're constrained by a tight budget, 
the software-only vendors make a compelling cost 
argument if you have an available server.And all 
could easily keep up with aT-1 circuit on our 350- 
MHz PII systems, even using the highest available 
level of encryption. 



If you haven't settled on a vendor yet, it's time to 
consider other features. 

• Selective encryption. Some products allow you 
to decide whether or not to encrypt traffic based 
on the service being accessed. Not every organiza- 
tion cares, but if you're trying to add a VPN to an 
existing firewall, you may want to encrypt only a 
subset of traffic. Or, you may want to apply a 
tougher encryption algorithm to packets going to 
the human resources system than to GIFs coming 
off the corporate Web server. 

•Topology. Most hardware VPN products ship 
with a pair of 10M bit/sec or 10/100M bit/sec 
Ethernet interfaces. Software vendors are often 
more generous with LAN interfaces because they 
can depend on Windows NT, NetWare or Unix to 
handle LAN and WAN interfaces (although the CPU 
may not be able to handle the load of even two). 
Some hardware vendors, including 3Com, Lucent 
and Radguard, also offer more than two LAN inter- 
faces on their products. 

• Certificate authority support. The ability to 
work with a certificate authority, provided either 
by the VPN vendor or a third party such as Entrust 
Technologies' Entrust/PKI, is key if you think you'll 



be managing more than a handful of tunnels and 
clients. We tested only three products — TimeStep 's 
Permit Gateway 4520,Axenfs Raptor Firewall/VPN 
Server and Check Point Software's VPN-1 Gateway 
— that could handle online connections to our 
Entrust PKI. 

• Logging. Once you've come up with a short 
list of products that fit, look at logging features. If 
you have a centralized logging facility, will your 
VPN integrate with it? What about SNMP? There is 
no defined VPN Management Information Base, 
but just being able to count packets with an SNMP 
management station can tell you a lot about the 
health of your VPN. 

• Management modules. Management stations 
are more than decision points — they can be bud- 
get busters. For example, Lucent's hardware is 
downright affordable, until you realize that you 
have to shell out an extra $12,000 for the manage- 
ment station. If you're going to be linking only two 
or three sites, vendors such as VPNet, Radguard, 
Lucent and Check Point make you pay a high pre- 
mium to set up their management infrastructure. 

— Joel Snyder 
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SPECIAL OFFER — FrameVision Starter Kit 

www. ke ntrox . com/sta rterki tea 

— 




FrameVision™ Frame Relay SLA monitoring from 
ADC Kentrox takes the guesswork out of managing your 
network performance. And with the FrameVision Starter 
Kit, you can take your first look at what's going on with 
your WAN traffic — risk-free! 

Order the FrameVision Starter Kit by July 31, 1999, and 
you can start to monitor your Frame Relay SLA. Try this 
special offer, priced at $2,295— and save an additional 
S150 if you order by May 31, 1999. 

For more information call 1-800-733-5511 or visit 
www.kentrox.com/starterkitca. Or call your ADC Kentrox 
reseller today to place an order (Model #72601). 

It's the risk-free way to give yourself the power and 
information to make smart network decisions. 




What You Should Know About Your 
Frame Relay SLA Performance. 

jj^jj KentPOX See us at NetWorld+Interop/Las Vegas. Booth #2422 

Redefining Network Access'" 



Free Product info enter NWInfoXpress #25 online @ www.networkworld.com/infoxpress 
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ner. Conclave, a combined firewall and VPN, lets the traffic move. Internet Dynamics' management interface 
network manager think in terms of policies: How stands head and shoulders above the others, 

secure do you want the traffic going from here to Because of the complexity of encryption and VPN 

there? Once you explain the policy you want. Conclave configuration, good documentation is crucial to mak- 
determines how to build a VPN between your systems ing informed decisions. Simple misconceptions about 
to yield the desired security. And if it can't give you the key terms could leave your data entirely exposed, 
security your policy requires. Conclave doesn't let the We have the usual complaints about product docu- 

mentation. Vendors are 
using the online docu- 

Performance tmSZ SSmS Menatoi r^f aa 

excuse to do little more 

3Com PathBuilder S580 61.3 10.3 than provide online help 

VP Net VPN ware VSU 1100251 60.0 21 0 for their GUI. However, 

Lucent VPN Gateway 2.0* "m 8.V" some stood out with 

- - good hard copy and on- 

R . ri .» MrdclPro . S y* 1e ™ 3J0 A 8 :? ,80 line dcx.umentation.Time- 

Check Point VPN-1 Gateway* 231 12.4 Step, for example, pro- 
Nortel Contivity Extranet Switch 1500 2.0 119 ~ 6.7 ~ vides a white paper on 

, Ll.iV " « „„., " " " V~ " " " " " Vo ~ " ' VPN security that COO- 

Intel LanRover VPN Gateway 6.6* 8 9 3.5 . ,' 

tuns one of the most 

Axent Raptor Firewall/VPN Server** . 61 . .. lucid explanations of IP- 

Compatible Systems IntraPort 2+ 7 2 2.5 Sec we've ever read. It's 

Microsoft Routing and Remote Access Service"* "Hi"' 2.V" worth looking at Tune- 

... Step's product just to 

TimeStep Permit Gateway 4520 5.1 2.0 read the mtorial.A. the 

Data Fellows F- Secure VPN+ 4.0" 5.1 4.6 other end of the spec- 
Internet Dynamics Conclave 1J2** 42 "~3A " trum were Novell and 
R e d C reek Ravi in 1 0/51 00 3.0.2 3 7 " lb " Compatible Systems, 

whose documentation 

Novell BorderManager Firewall Services 3 3.0 21 stopped just short of be- 

• With accelerator mg wor5e than nothing. 
" Software tested on a 350 MHz Pentium II system There are many fac- 

100 Mbps. 10 Miles. 



Online. 



• How we did it. 
A chance to chat with Joel Snyder. 



• Interoperability testing details. 

• Advice from VPN adopters. ilf 



tors to consider before settling on a VPN strategy. 
Among them are compatibility with existing equip- 
ment, management workloads and extra features (see 
"How to choose the right VPN product," page 92). We 
suggest that you take the time to test prospective pro- 
ducts before you buy. Security is just the beginning. 

Snyder is a senior partner with Opus One, a con- 
sulting firm in Tucson, Ariz., specializing in email 
security and networking, lie tratvls the world helping 
people build bigger, faster, safer and more reliable net- 
works, lie can be reached at joel.snyder@opusl.com. 




Snyder is also a member 
of the Network World Test 
Alliance, a cooperative of 
the premier reviewers in 
the network industry, 
each bringing to bear 
years of practical experi- 
ence on eiery rei'iew. For 
more Test Alliance informa- 
tion, including what it takes to become a metn- 
lier.go to www.nwfttsion.com/alliance. 
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635 Vaqueros Ave.. Sunnyvale. 
Phone: (408) 522-8700 Fax: (408 
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The High Speed, 
License- Free Solution 
For Data Transmission. 




For transmitting critical data at speeds up 
to 155 Mbps, over distances of up to 2.5 
miles, nothing performs like Canobeam II. 

Canobeam sets-up in minutes, is easy-to- 
use and operates interference free 
assuring reliable and confidential 
transmission. A unique auto-tracking 
adjustment system insures uninterrupted 
operation even from the tops of buildings 
prone to sway and vibration, while a 




built-in "video camera" feature 
automatically sets up the bi-directional 
HS-40B Heads. 

The CD-30F control unit, which is 
connected by coaxial cable, provides 
control and monitoring from any location, 
within 600 feet of the HS-40B beam 
unit. There's even a built-in flash for 
set-up at longer distances, night, or in 
inclement weather. 



• Fast Ethernet/ 100 Base F. 
FDDI, ATM/OC-3 

• Up To 2.5 Miles 

• Auto-Tracking Insures 
Reliable Transmission 





For more info 
Call 1-800-321-4388 

(In Canada: 905-795-2012) 

http://www.usa.canon.com 

Emmy winner for "Implementation in 
Lens Technology to Achieve 
Compatibility with CCD Sensors. " 

Free Product info enter NWInfoXpress #29 online i 
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„ .^xrthing Over IP 



PREVENT NETWORK FAILURE. Netcom Systems' applications 
and its SmartBits™ family of performance analysis systems create the only true test 
for converging data, voice and video networks. These simple and extremely accurate perfor- 
mance tests give you the tools you need to make today's IP centric networks work. SmartBits 
applications perform the most comprehensive test of • Multicast IP • TCP • Internet 
Services • IP Network Switches »xDSL • Cable Modem • POS • Gigabit. 
BECAUSE NETWORK FAILURE IS NOT AN OPTION. 

www.netcomsystems.com/adv/ 
1.800.927.2660 





NetCom 

SYSTEMS 

If it wasn't tested by SmartBits". ..it wasn't tested 

Free Product info enter NWInfoXpress #46 online @ www.networkworld.com/infoxpress 
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CROWNING OUR NEW 
SWITCH LEADERS 



3Com. Foundry and HP arc the price/performance 
kings in the first round of Network World/Tolly 
Group 1333 Switch Metric testing. 



SwitchMetric Leaderfaoard coapergig.*, 

Switch type/test Vendor/product of throughput 



BY CHARLES BRUNO AND KEVIN TOLLY 



The spin doctors at network switch compa- 
nies spend countless hours devising sto- 
ries that they hope will position their 
switches as cost-per-port leaders, through- 
put champions and standard bearers. 
These folks are good at what they do, mak- 
ing it all that much tougher for you to 
weed through their claims and make 
informed buying decisions. 
To give you at least one independent 
point of comparison when evaluating 
switches.The Tolly Group and Network 
World devised a benchmark that makes it easy to see 
which vendors have the best price/performance ratio 
in the switching business. 

In the inaugural 1 999 SwitchMetric, we bench- 
marked 1 5 products — seven Gigabit Ethernet 
switches, six Fast Ethernet switches and a pair of 
token-ring switches — from nine vendors. Using a 
state-of-the-art, $1. 35 million test bed featuring 
Netcom Systems' SmartBits Advanced Multiport 
Performance Tester/Analyzer/Simulators (see story, 
page 98), The Tolly Group identified each switch's 



Gigabit Ethernet — Layer 2 



Gigabit Ethernet — Layer 3 IP 



3Com SuperStack II Switch 3300 $1 ,325 

3Com CoreBuilder 9400 $1,764 

Foundry Biglron 4000 $2,280 

Foundry Biglron 8000 $2,41 3 

HP ProCurve Routing Switch 9308M $3,515 

HP ProCurve Routing Switch 8304M $3,531 



Gigabit Ethernet — Layer 3 IPX 



Fast Ethernet — Layer 2 
(no 10M or Gigabit links) 



best aggregate throughput. We 
then divided that figure by the 
manufacturer's suggested retail 
price, as provided by the ven- 
dor, for the switch configuration 
tested. 

The result is a cost per gigabit 
of throughput, a new metric 
intended to help you determine 
the price you pay for each gigabit 
per second of throughput a 
switch provjdes.Think of it as 
analogous to the cost-per-MIPS 
metric used in benchmarking computer systems. 

The 1999 SwitchMetric establishes a set of baseline 
results that we will build on over time. As we bring 
more switches into the lab and subject them to our 
benchmark, we'll continually add the results to our 
database. We will keep an online leaderboard up to 
date on Network World Fusion (www.nwfusion.com), 
and the full results database will be available from The 
Tolly Group at http://switchcentral.tolly.com. Results 
will be published in print at least a couple of times 



Foundry Biglron 4000 S2.280 

Foundry Biglron 8000 $2,413 

HP ProCurve Routing Switch 9308M $3.51 5 

HP ProCurve Routing Switch 9304M $3,531 

Lucent P550 Cajun $4,288 



Foundry Biglron 4000 $2,280 

Foundry Biglron 8000 $2,413 

HP ProCurve Routing Switch 9308M $3,515 

HP ProCurve Routing Switch 9304M $3,531 



HP ProCurve Switch 4OO0M $966 

VIPswitch, Inc. VIPswitch 1 600 $2,496 
Cabletron SmartSwitch Router 2000 $3,277 



1 





each year, as well. 

For this initial round. Network World and The Tolly 
Group invited every switch maker to the benchmark- 
ing party. Nine accepted and were able to deliver 
switches in time for this initial report.Ten more agreed 
in principle and promised to participate in later tests. 
Only Cisco outright declined. 

Cisco executives argued that users are interested in 
more than simple price/performance numbers. We 
couldn't agree more, but we also know that price/per- 
formance is still an important consideration — albeit 
one of many. Our door is still open should Cisco 
change its mind. 

The inclusion or absence of vendors, switch topolo- 
gies and protocols tested is indicative of the state of 
the network market. Olicom, for instance, was the only 
token-ring vendor to test in the initial round, under- 
scoring the popularity of Ethernet-based switching. 
(You'll find the Olicom results in our online charts. 
Based on its numbers, it appears token-ring switch 
vendors will have a tough time making the price/per- 
formance case vs. their Ethernet brethren.) 

The results: Gigabit switches 

For each type of switch, we gave vendors the option 
to participate in any or all of three basic tests — Layer 
2, Layer 3 IP and Layer 3 IPX — depending on which 
markets they believe their products are best suited to 
serve. For each protocol, we conducted separate tests 
with frame sizes of 64, 512 and 1,518 bytes. The cost 
per gigabit of throughput results offered are derived 
from tests with 1 .5 18-byte frames, which offer the 
least processing overhead of all frame sizes tested and 
thus should result in the highest throughput 

On the Gigabit Ethernet switch side, all switches 
offered between 1 2 and 6-j ports and were configured 




Foundry's Chris Vu (left) gets 
his configuration straight wit 
The Tolly Group's Tom Callas 
(middle) and Greg Kilmartin. 



Network World May 1 0, 1 999 www.nwlusion.com 97 



Feature 



MOTH Go online for more test 

f> I ■ results, including 

I! I I 11 P configuration details such 
U II I I lIC as the maximum throughput 
- of each switch tested. 

Check back often - as we get more switches into 
the lab, we'll continue to update the SwitchMetric 
Leaderboard on Network World Fusion and post full 
results on The Tolly Group's SwitchCentral site. In 
September, we'll publish more test results in the 
pages of Network World. 

FIND IT -EBEH ON (Mil 



in a fully meshed network design. Nearly all of the 
switches tested achieved wire-speed throughput at 
each frame size, although there were some exceptions, 
all of which are detailed in our online charts. 

3Com's SuperStack 11 Switch 9300 and CoreBuilder 
9400 proved to be the best value for Layer 2 Gigabit 
Ethernet switches, offering a cost per gigabit of 
throughput of $ 1 .325 and $ 1 ,764, respectively, in the 
1,518-byte test. 

This is especially interesting in light of the fact that 
the 3Com switches were the only Gigabit Ethernet 
products that failed to deliver wire-speed throughput 
in 1,518-byte tests, with the 9300 at 94% of wire speed 
and the 9400 topping out at 85%. On the other hand, 
both devices did achieve wire-speed rates and excep- 
tionally low cost-per-gigabit ratings in the 64- and 5 1 2- 
byte frame tests. 

3Com officials point to an Ethernet clock tolerance 
issue as a possible reason why its switches failed to 
perform at wire speed for the 1 ,5 18-byte tests. In 
short, the clocks that drive a switch and the SmartBits 
traffic generator tool operate independently; if the 
switch clock is behind the SmartBits' clock time, the 
test tool could transmit enough data to overwhelm a 
switch's buffers, causing packets ro drop. 

Foundry Networks' Biglron 4000. a 32-port Gigabit 
Ethernet campus switch, delivered the next best value 
in the Layer 2 tests at $2,280 per gigabit of throughput 
using 1,51 8-byte frames. Foundry also delivered the 
best cost per gigabit of throughput for 64-port Gigabit 




Olicom's Jerry Hamden checks out results with Tolly Group 
engineer Elke Passarge. 



Ethernet switches, with a figure of $2.4 1 3 for its 
Biglron 8000. 

In the Layer 3 tests, however, Foundry bested the 
competition by a margin of more than $ 1 ,000 for 11' 
and IPX traffic.'I "he Biglron 4000 and Biglron 8000 
delivered cost per gigabit of throughput figures below 
$2,500 in each test, whereas the closest competitor, 
the Hewlett-Packard ProCurve Routing Switch 9308M, 
came in at just over $3,500 for IP and IPX. 

The test results support the idea that many gigabit 
switches can unify subnetworks and perform as the 
routing point in the center of an enterprise network 
hackbone.The simple fact that the majority of these 
devices offered wire-speed throughput indicates they 
are well-positioned at Layer 2 and layer 3 to push 
routers further out to the network's cdgc.Thc ability 
to manage routing and switching from a single device 
should prove a cost-effective alternative to purpose- 
specific routers. 

Fast Ethernet findings 

On the Fasr Ethernet side.The Tolly Group tested six 
devices with port densities ranging from eight to 84 
ports. All were primarily workgroup-oriented switches, 
some were hybrid models with Gigabit Ethernet 
uplinks, some were pure Fast Ethernet, and others 
mLxcd Fast Ethernet and 10M bit/sec Ethcrnct.Wc 
derived a cost-per-gigabit figure by adding the total 
capacity and expressing it in a gigabit-pcr-second rate 
Among pure Fast Ethernet switches, HP's ProCurve 
Routing Switch 4000M delivered the lowest 
cost per gigabit of throughput at just $956 for 
1,518-byte frames in our Layer 2 test. And 
HP's ProCurve Switch 2424M, 
a 24-port Fast Ethernet switch with one 
Gigabit Ethernet uplink, delivered a cost per 
gigabit of throughput of $ 1 , 1 95 — the lowest 
cost for any hybrid Fast Ethernet/ Gigabit 
Ethernet switch. 

Note, though, that both HP switches 
stopped short of offering full wire-speed 
throughput.The 4000M delivered 94% of its 
theoretical maximum 4G bit/sec through- 
put, and the 2424M delivered just under 91% 
of its rated 3-4G bit/sec throughput. 

Another interesting note is that the 
price/performance spread between Layer 2 
and Layer 3 functionality on Cabletron's 
SmartSwitch Router 2000 is nil. indicating 
that some switch makers may no longer be 
charging a premium for Layer 3 functionality 
in Fast Ethernet switches. Aside from 



L 



nwfusion 



com 



J 



Cabletron, no other vendor offered Layer 3 functionali- 
ty in a Fast Ethernet switch, an indication that vendors 
that participated in this round of testing are commit- 
ted to Fast Ethernet in the flattened edges of enter- 
prise networks. 

Going forward 

While this first round of testing for the 1999 
SwitchMetric provides a good deal of insight into 
the cost implications of Gigabit Ethernet and Fast 
Ethernet switches, the findings will become more 
valuable throughout the year as we test products 
from additional vendors and add those results to the 
mix. At an average cost per gigabit of throughput of 
$2,840, Gigabit Ethernet switch vendors appear to 
have some work ahead to catch up with 3Com's 
$1,325 minimum cost per gigabit of throughput at 
Layer 2. 

Likewise, on the Fast Ethernet switch side, HP has 
set the price to beat with a cost per gigabit of 
throughput of $956. Testing also demonstrated that 
the best cost per gigabit of throughput deaLs may not 
necessarily deliver wire-speed throughput, leaving 
users with an interesting choice between cost and 
performance. 

TTie gauntlet has been thrown down. We invite any 
and all vendors to come into the lab and try to best 
3Com. Foundry and HP, which we expect will be 
back to try to beat their best. 

Bruno Is managing editor of publishing products, 
and Tolly is president and CEO of The Tolly Group. 
They can be reached at cbruno@toUy.com and ktolty 
® tolly.com. 



THE METHOD BEHIND THE METRICS 



To conduct the 1999 SwitchMetric lests.The Tolly Group connected each sw itch 
to a test bed outfitted with $1 35 million worth of Netcom Systems equipment. 

Tile test bed was configured to determine each switch's full-mesh aggregate 
throughput — throughout with each port transmitting to and receiving data 
from even other port. This setup provided a maximum load, enabling us to 
determine a switch's throughput capability in a worst-case traffic scenario. 

At the heart of the test bed w ere as many as six SmartBits Adv anced Multipart 
Performance Tcstcr/Analyzcr/Simulators provided lor the test by Netcom. The 
SmartBits devices were used to generate Layer 2 and Layer 3 IP and IPX traffic, as 
well as to receive data from the switches and record all results. 

Engineers tested multiple vendor switches side by side, using five SmartBits 
test tool device stacks. Each stack comprised a mix of SmartBits gean'I'hc Tolly 
Group used five SMB-2000 chassis-based testers and 15 smaller SMB-lOs. 

This exercise demonstrates the ease with which you can configure multi- 




ple SmartBits testers to act in concert on a large 
throughput test." says Tom Callas, the Tolly Group 
engineer who coordinated the testing. 

The Tolly Group used Netcom's Xstream advanced 
switch test to conduct layer 2 mesh testing. For layer 
3 IP testing of 10/100M bit/sec Ethernet switches, we 
used Netcom's VLAN Advanced Sw itch Test. For layer 
3 IP tests of Gigabit Ethernet switches, engineers manu- 
ally configured the test using Smart w indow, a Netcom application that enables 
users to manually craft a test and build their own traffic patterns. Likewise, all 
layer 3 IPX testing was configured manually using Smart Window. 

Testing w as conducted between March 16 and April 16. 

— Charles Bruno 



Tom Callas, The 
Tolly Group 
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Cable & Wireless USA has it. We have terabytes of information — or take tens 

one of the most powerful, most reliable of millions of hits — in total confidence. 

Internet backbones on the planet. Seeforyourselfattraffic.cwusa.com. 

A rock-solid, high-speed backbone built 



specifically to carry mission-critical For information call 1.800.969.9998 or 
data and applications. Letting you move you can visit us at www.cwusa.com. 
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Guaranteed To Go The Distance. 

Only InfiniCor CL" fiber provides you with the laser-optimized fiber advantage". 

■ Guaranteed* Gigabit Ethernet transmission up to 2,000 meters 

■ On-center launch for optimal performance at 1300 nm without a patch cord 

■ Measured laser bandwidth to guarantee performance in laser-based systems 

■ Designed for operation in tomorrow's high-speed 2.5 and 10 Gbps systems 

So on the way to your LAN of the future, choose the fiber that won't fall short - InfiniCor CL fiber. 
For your free technical packet on InfiniCor CL fiber, call 800-525-2524, ext. 4122 today. 

What's Your Network Made Of? 

* Guaranteed through approved cabler warranty programs. WWW.COrningfiber.COm 
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BY NEAL WEINBERG 




your Internet connection getting 
bogged down? Are end users complain- 
ing about the World Wide Wait? Are you 
adding new Internet or intranet appli- 
cations that may require additional 
bandwidth? 

Maybe it's time to consider imple- 
menting a Web-caching appIiancc.Thcse 
devices store a copy of previously 
accessed Web pages and eliminate the 
need to download those pages from the 



Internet the next time an end user requests them. By 
reducing Internet traffic and improving network per- 
formance, caching appliances may allow you to delay a 
costly Internet access upgrade. 

ISPs buy the bulk of caching products these days, 
but analysts predict that corporate customers will 
begin turning to caching appliances later this year as 
they cither outgrow their software-based proxy 
servers or look to caching for the first time in the face 
of mounting end-user complaints about slow Web 
response time. 

"The market for caching will ultimately be huge," 
says Peter Christy, an analyst at Collaborative Research 
in Los Altos, Calif. He expects the market to grow from 
$100 million in 1998 to $2 billion by 2002, with 
caching appliances dominating the field. 

However, caching appliances are expensive — a 
high-end box can cost $100,000,And early adopters 
say that while caching helped them reduce Internet 
traffic, they still had to upgrade their Internet connec- 
tions to accommodate exploding user demand. 

"Caching is not magic," Christy says."It doesn't mean 
all youll ever need is aT-1 line." 

Ray Smith, Internet services manager at IT consulting 
firm Computer Sciences Corp. (CSQ, knows that only 
too well. Workers at CSC's 450 remote offices connect 
over the company's WAN to its central office in Falls 
Church, Va. From there, they access the Internet via 
three separate ISP connections that provide 9M bit/sec 
of total bandwidth. 

However, bandwidth requests on the WAN were 
peaking at 18M bit/sec, so the Web traffic was dragging 
down the entire remote access network. 

Smith deployed two CacheFlow appliances from 
CacheFlow, along with anACEdirector Layer 4 switch 



IrVefo caching appliances help 
conserve precious Internet 

bandwidth. 



from Alteon WebSystems.The switch intercepts all 
HTTP traffic and redirects it to the cache, reducing the 
load on the company's remote access router and 
improving overall WAN performance. 

The appliances also reduced the amount of Internet 
traffic, and end users noticed a quicker response to 
their requests for Web pagcs.Thc CacheFlow products 
were reporting an impressive 65% hit rate, which refers 
to the amount of requested material found in the cache. 
Vendors put the average hit rate at about 35% to 40%. 

But to Smith's chagrin, "the bandwidth we saved 
quickly got eaten up by something else. "The com- 
pany's 2,000 consultants began to more heavily rely on 
the remote access links for other applications, and their 
appetite for Web surfing also increased. As a result, he's 
been forced to upgrade his Internet access to 32M 
bit/sec with a variety of fractional T-3 connections. 

Still, Smith says he loves everything about the Cache- 
Flow appliance, with the exception of its yellow color. 

Jeff Wade, network information specialist at Science 
Applications International Corp. (SAIQ, a systems inte- 
grator based in San Diego, has a similar tale. 

About two years ago, he installed Netscape's proxy 
server, which starts at $525 for a 100-uscr license. 
Proxy server software is inexpensive compared with 
caching appliances, but it can't touch the perfor- 
mance, management features and scalability of boxes 
that are fully optimized for nothing but caching. 

Proxy servers have another drawback — to get the 
system up and running, end users need to point their 
browsers to the proxy server, which can cause an 
administrative nightmare. Managers need to reconfig- 
ure each browser to send all H1TP requests directly to 
the proxy server's URL 

Wade supports 25,000 end users at more than 150 
locations across the U.S. and doesn't have a way to 
remotely change the settings on the end user's PCs or 
send IS staff to all the locations. 

He sent out notices through various internal chan- 
nels, but after six months, only 30% of end users had 



What is network-level 
Web caching? 

The concept behind caching isn't new. In fact, 
standard browsers such as Navigator and Internet 
Explorer automatically cache copies of Web pages to 
an end user's disk drive. The next time the user re- 
quests one of those pages, it's delivered directly from 
the cache rather than downloaded over the Internet. 

Network caching follows the same principle. The 
caching appliance or proxy server sits at a point 
many users pass through to access Web content. 
Every time a user requests a Web page, the cache 
performs an internal search. If the device finds the 
page, it sends it to the user; if not, the cache re- 
trieves that page from the Internet and stores a copy. 

Over time, the cache grows and the network 
benefits because the number of pages downloaded 
from the Web is significantly reduced. 

complied with requests to reconfigure their browsers. 
That meant 70% of end users weren't going through 
the cache. 

Looking for improved performance and better man- 
agement features, Wade then invested $60,000 in a 
NetCache appliance from Network AppIiance.That 
price tag includes 100G bytes of disk space and a 
redundant power supply. 

He set the policy on his Cisco routers so that all 
HTTP traffic is automatically funneled through the 
cache.This allows the NetCache appliance to run in 
what is known as transparency mode, which elimi- 
nates a major administrative burden by removing the 
end user from the equation. 

Wade is getting a hit ratio of about 50%, but a more 
important measure of bandwidth utilization — actual 
byte savings — is only about 28%. He explains that the 
cache contains a lot of icons, images, logos and tiny 
dots that don't change, so the hit rate for these tiny 
.GIF files is extremely high. However, the content that 
needs to be refreshed and downloaded more often 
includes large data files. 

Nevertheless, Wade is pleased with NetCache's over- 
all performance. He's getting two million hits per day 
and has more than two million objects stored in the 
cache. "The machine doesn't breathe hard at all," he says. 

The caching devices allowed him to forestall an 
Internet access upgrade for several months, but gallop- 
ing bandwidth demands forced him to upgrade his 
4.5M bit/sec pipe to 10M bit/sec a few months ago. 

There must be a cache-22 

Cache appliances have their limitations. First, pages 
with cookies and dynamic pages, such as those gener- 
ated by Common Gateway Interface scripts, are 
uncachable, although the vendors claim that those 
only amount to around 5% of requests. 

In addition, caching only applies to HTTP traffic, not 
to other types of traffic that move over Internet links, 
such as e-mail and File Transfer Protocol. Also, caching 



Caching in 

Vendor: 



CacheFlow. Inc. 
CacheFlow 

Technology guru: Company founder Michael 

Malcolm also founded Network 
Appliance. 



InfoLibria 

DynaCache 

Former Boston University professor 
Abdelsalam Heddaya 



Network Appliance, Inc. 

NetCache 

NetCache software is a 
commercial version of the Harvest 
public domain caching software 
written by Peter Danzig, considered 
by many to be the father of caching. 
The product measures response time 
on the fly. If the cache is faking too 
long to track down a page. NetCache 
passes additional requests straight 
through to the Internet. 



Differentiating CacheFlow opens multiple, 
product features: simultaneous TCP connections to 
speed retrieval of pages. 



DynaCache addresses the potential 
problem of the cache becoming a 
single point of failure with a 
switch/bridge mechanism that 
automatically routes traffic past 
the cache when necessary. 
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Ouch, that's gqtta hurt, infdwdrld recently tested CyberCop Scanner, the 
world's leading vulnerability assessment tool. against the number two product. 



THE REPORT WAS CLEAR- CYBERCOP SCANNER IS FASTER. CHEAPER AND BETTER THAN THE COMPETITION. SO IF YOU 
DON'T WANT YOUR NETWORK TO TAKE A BEATING, CALL US AT 1 -8DD-332-9966, 
DEPT. 6256, OR VISIT WWW.NAI.COM/CYBERCOP FOR A FREE COPY OF THE REPORT. 
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doesn't work with pages that are gener- 
ated through a request made to a data- 
base or data warehouse. 

Vendors with software-only proxy 
server products include Netscape, 
Novell and Microsoft. Caching appli- 
ance manufacturers include start-ups 
CacheFlow, InfoLibria and Network 
Appliance, which offer boxes that run 
on proprietary operating systems. 

Cisco's caching appliance. Cache 
Engine, uses a proprietary operating sys- 
tem that works best when it's connect- 
ed to a Cisco router running IOS.And 
Inktomi is targeting its caching software 
for SPARC servers at carrier-class ISPs. 

James Staton, an analyst at Dataquest/ 
Gartner Group, says caching appliances 
will come to dominate the market 
because of their superior performance. 
ISPs will be buying most of the caching 
appliances in 1999, but corporate inter- 
est will begin to perk up later in 1999. 

It all depends on when network pro- 
fessionals begin feeling the pain of user 
complaints over sluggish performance, 
Staton says. He suggests network man- 
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Efforts to create a global cache 
hierarchy stir opposition. 

Results of the first Internet caching 
bake-off. 

Comprehensive resources on 
caching. 
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The next major event in the 
caching scene will be the 
introduction of what might 
be called third-generation 
products by powerhouses 
Compaq and Dell. 

The. vendors have announced 
plans to jump into the caching ap- 
pliance market by licensing No- 
vell's Internet Caching System soft- 
ware Co bundle with their servers. 
Compaq's appliance will lx- based 
on the ProLiant, while the DeO 
offering will include the Power- 
EdgC. Pricing for Dell's low-end 
model will start at about $-4,500. 

Both products are slated to ship 
this summer. 



agers start with a large cache at the 
data center, then consider caching at 
satellite offices in other countries, 
because international connections are 
so expensive. Finally, move to caching 
at domestic branch offices. 

If you have a popular Web site,Staton 
recommends implementing something 



called reverse caching.This entails plac- 
ing a caching appliance at the Web serv- 
er so it can deliver frequently requested 
pages to Internet shoppers.This has the 
double benefit of offering better perfor- 
mance to potential customers and tak- 
ing some of the load off the Web server. 
Christy adds that the market for Web 



caching appliances can only grow as 
companies begin to run more Web- 
based applications. 

He says the bottom line is that disk 
space costs less than WAN bandwidth, 
so it makes more sense to store copies 
of information locally than to go out 
over the WAN and retrieve it. A 





Office products may not seem thrilling to you. 
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That's a whole lot of paper clips. 

And that's why Mike Miller relies on NetSolve for remote 

network management and internet security services. 

When you're busy building a business, you don't want 
your staff worry ing about your network. NetSolve can 
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Cool Tools 



Quick takes on hi^h-tech toys, 



Lee Schlesinger, Test Center Director 

A Buddy for your PC 



What's the simplest way to let 
two computer users share 

resources? W indows OS's Direct Cable 

Connection, maybe? Sure, that's simple. 



but what if you could accomplish the 
same thing without buying a second IT? 

Vega Technologies' Buddy System kit 
lets two users share a single PC The 



second user gets his own monitor, 
mouse ami keyboard. All the process- 
ing happens on a single client. 

I bis de\ ice could come in hand) lor 



Take the guesswork out of 
choosing the right VPN solution. 
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TECHNICAL SEMINARS 



MAXIMIZING COST SAVINGS 
AND BUSINESS EFFICIENCIES 



Have confidence in the 
solution you choose. 

Network World Technical Seminars has brought together one of the 
industry's leading VPN experts, Eric Zines of Tele Choice. Inc., and 
leading VPN solution providers in a comprehensive one-day seminar. 
The program is designed specifically to help you better understand this 
technology, the factors you must consider during the decision-making 
process, and the information you need to choose the right VPN solution 
for your business. Mr. Zines will explain not just how VPNs work, but 
how they can be applied to real-world situations. Equally as important is 
knowing which solution provider can best guide you through the 
implementation process This seminar will give you the unique 
opportunity to discuss your specific needs via live, face-to-face 
interaction with the industry's leading VPN solution providers. 

Benefits of Attending 

• Discover how VPNs can benefit your enterprise 

• Explore future directions of VPNs and their effect 
on your business 

• Compare and contrast product and service offerings 
available for implementing a VPN 

■ Gain insight into the network management and 
administration issues associated with VPNs 

Learn from the Leader 

MpMM Network World Technical Seminars is known ^ 
tMnl.Mlilll'l throughout the networking community for providing 
ujtff^f'T^l IT professionals with expert, unbiased education on 
HffEnfvmffl tne latest technologies and trends shaping today's 
ijfffifflfttfnl mission -critical networks, rhis reputation ^flfl 
MrWWiihWi combined with our 100% satisfaction 

guarantee makes us the educator of choice 

in the networking industry. 

Eric Zines. Senior Market Analyst wtthTeleCholce, 
Inc., has developed and will present this seminar. 

He continually tracks and interprets the rapid "^^^^HBk 
changes in the VPN market and will share with you ^■^■fe' 1 

his valuable insights, difficult to find anywhere else. 

1999 Seminar Tour 

Chicago • April 6 

Denver • April 7 ^Bt 

San Francisco • April 20 
Seattle • April 21 
Boston • May 4 
New York ■ May 5 
Philadelphia • May 26 
Washington, DC • May 27 
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Seminar Registration Fee — M5 

Bring your colleagues and take 
advantage of our Team Discounts 

2 registrants S400 each 

3 registrants S350 each 
Every 4th registrauft is FREE 



For complete program agenda and 
registration information, contact us at 

(800)643-46 

www.nwiusion.com/semi 
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two |ob-sharing employees whose 
hours overlap, or as an inexpensive 
add-on lor home offices. 

ITie kit's brain is a plug-and-play ISA 
card. It attaches to a junction box via a 
special cable The junction box sports 
sockets for the second monitor, key- 
board and mouse, all of which must be 
plugged in for the product to work. 
There's also a software driver and .1 
management program that require you 
to reboot the computer twice during 
installation — a minor inconvenience 
lite softw are runs only on Window s 95 
or 98 — there's no NT version. 

Once everything is in place. Muddy 
works like a charm both monitors dis- 
play the Window s 99/96 logon screen. 
If you've set up multiple users, you can 
log on under two different user names, 
meaning the two desktops can look 
quite different. 

buddy isn't a magician. It doesn't let 
you do things you can't do on a net- 
work; two users can't be editing the 
same file, for example. And any pro- 
gram that uses and locks an initializa- 
tion file w hile it runs may not behave- 
as expected. I could run the same copy 
of Porte s Agent newsreader on both 
stations, but the one that started sec- 
ond couldn't see the list of newsgroups 

available. 

To get around this, you can install 
multiple copies of an application to dif- 
ferent directories for use by multiple 
users. Just make sure you keep your 
licenses legal 

The primary computer user runs the 
buddy Control Center application to 
activate the buddy station This pro- 
gram includes an applet that lets you 
send messages back and forth between 
the two stations, but given that the 
buddy station is tethered to the host In 
a 15-foot cable, it might be easier just 
to pokt your head over tin 1 ubic le \ 
SO-foot cable is also available 

Buddy is a useful computer tool, but 
it won't curl up on your lap w hen you 
settle down with some exciting soft- 
ware documentation, as a furry buddy 
will. Allow me to digress on a subject 
near to my heart .You can find a new 
best friend through one of the many 
pet rescue organizations across the 
country; never bin a dog or cat from a 
pet store- V isit www petfinder.org. run 
an Internet search to find an animal 
shelter near you. or e-mail me for a list 
of canine rescue sites. 

If you already have a pel. make sure 
you spa\ or neuter. An unw anted pet is 
a much sadder thing than an obsolete 
computer. A 
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Coolness 




Vega Buddy 
System 

Vega Technologies 
CilO) 65-*- 565(7. 

www.vgtxtetecbnologies.com/ 

products/buddysystem.btml 

S/50 

Bottom line: A cheap and easy way 
la gel a second computer 



If you are interested in sponsorship opportunities, please contact Andrea D'Amato at (508] 820-7520 or adamato@nww.com. 




NFORMAT I CS 



eb-To-Host 
Connect:ivit.y, 
au can Cairtral 



(z f h. l\% 'V You need to grant host access to a 

broad range of users, including employees, 
customers and suppliers. But host access 
must be secure and centrally controlled. 
Learn how Winsurf Mainframe Access from 
ICOM Informatics gives your users simple, 
browser-based host connectivity while you 
maintain centralized control of host resources 
from whereever you happen to be. 





CONCURRENT MULTI-HOST ACCESS: 
IBM, AS400, DEC, Unix. 

BROWSER-BASED EMULATION: 
Internet Explorer, Netscape. 



CENTRAL, SECURE ADMINISTRATION: 
Browser-based admin console. 

COMPLETE TERMINAL EMULATION: 
File transfer & printer management. 

APPLICATION REENGINEERING: 
Automatic HTML conversion. 

CUSTOM DEVELOPMENT TOOLS: 
VB script and Interdev Compatibility. 



FRANCE, Headquarter! 
ICOM Informatique 

1 8 avenue Winston Churchill 
F-94227 Charenton Cedex 
Tel. : 33 (0) I 46 76 45 60 
Fax : 33 (0) I 46 76 45 59 



ENGLAND 
ICOM Informatics 

Exchange House, 494 Midsummer BJ 
Central Milton Keynes MK9 2EA 
Tel. : 44 (0) 1908 677616 
Fax : 44 (0) 1908 67001 3 

http://www.icominfo.com 



^^^^^^^^^^^^^^^^^^M http://www.icominfo.fr 

Free Product info enter NWInfoXpress #59 online @ wvrw.networkworld.com/lnfoxpress 



GERMANY 
ICOM Informatics 

Stcfan-Gcorgc-Ring 29 
D-81929 Munchen 
Tel. : 49(0)69 930 861 50 
Fax : 49 (0) 89 930 5184 

http://www.Kominfo.com 



USA 

ICOM Informatics 

1 1 824 Joll/vllle Road - Suite 500 
Austm.TX 78759 
Tel. : I 512 335 8200 
Fax : I 512 335 9110 
hnp.//www 1 icomirrfo.com 




elivering the Future: 

SAT" + 1 301 214 3100 www.comsat.com 



tine @ www.networkworld.com/infoxpress 





anagement 

Strategies 



Career Development, Project 
Management, Business Justification 



The security specialist 



An intelligence career prepared Howard Schmidt for 
the job of protecting Microsoft's network. 



BY DEBORAH RAD CLIFF 

EVCTyOOC loves to hate the top dog, and in the 
world of software vendors, the top dog is Micro- 
soft. And no one hates Microsoft more than 
hackers. Jericho, a former hacker, calls Micro- 
softs network the Holy Grail of hackers. 
He speculates tliat almost every hacker enter- 
tains the thought of breaking into Microsoft's network 
for source code or to deface the company 's Web page. 

So it's no wonder that 18 months ago Microsoft 
hired a former military cyberspook to build a compre- 
hensive information security unit. After Dave Gasic- 
wicz, Microsoft 's general manager of information ser- 
vices, heard Howard Schmidt lecture on the security 
problems of the national information infrastructure. 
Gasiewicz convinced him to join the company. 

The timing couldn't have been better. Schmidt's dis- 
illusionment with military bureaucracy was at its peak, 
and he was more than ready to bail out of the red-tape- 
plagued Office of Special Intelligence (OSI). an arm of 
the U.S.Air Force. 

During his short tenure in Redmond. Wash , Schmidt 
has organized Microsoft's scattered security staff into 
teams and added new players, drawing them all under 
one umbrella called the Microsoft Information Assur- 
ance Program. The teams include: 

• A Computer Emergency Response Team, which 
assists when the corporate network is attacked or 
spammed. 

• The Strategic Technology Group, which handles 
internal Security design and policies, and evaluates 
security risks for new technology. 

• System administrators, who establish secure 
accounts and domain names. 

• An Investigations Team trained in computer foren- 
sics. which gathers evidence of attacks against the net- 
work or internal misuse of systems. 

• A Red Team, which tries to hack into Microsoft's 
systems to test them for vulnerabilities. 

Schmidt has also implemented the Inf<>Safc user 
awareness program to heighten employees' awareness 
of network and data security. 

Although it might seem tliat Microsoft lagged in its 
efforts to develop a comprehensive security program, 
the vendor is actually a little ahead in the game, ana- 
lysts say. 

It's rare to find a company that employs a security 
director like Microsoft does, says Alan Ma, research 
director tor Systems Administration Networking and 
Security, an education and research cooperative in 
Bethesda. Md. 

Most businesses are just now launching security 



units based on their needs and budgets. 
Puller says. According to a 1998 report from 
the American Society of Industrial Security, 
63% of the 638 companies surveyed said 
they plan to hire one to 20 security practi- 
tioners this year. 

A hacker in the purest sense, Schmidt's 
techno habit grew out of a liigh school 
computer timeshare project. By 1976, he 
had built his first computer, a Sinclair Z-80. 

"I had parts all over the place," he says 
with a chuckle. 

Schmidt's dream was to join a small-town 
police force and retire as chief. He picked 
the Chandler. Ariz., police department. But 
in the mid-80s, Schmidt foresaw that white 
collar crime was going to be conducted 
with computers. Before he knew it. he 
became the Chandler Police Department's 
one and only computer crime expert. 

By 1986. he could break into password-protected 
files in 30 seconds. In 1987. he Investigated his first 
murder case involving a PC; a woman was missing, and 
her goodbye note was written on her husband's work 
computer. 

"Here was Howard in this little Chandler Police 
Department helping out the Federal Bureau of 
Investigations and the Drug Enforcement Administra- 
tion," says Gail Thackeray, special counsel for technol- 
ogy crimes at the Arizona Attorney General's office in 
Phoenix. 

She recalls a 1 986 kidnapping/extortion threat in- 
vestigation in which Schmidt found damning evidence 
on an erased hard drive. "The content of the extortion 
letter was completely erased, but Howard found this 
little file header xtort.ltr' on a backup director)." she 
says."It was great evidence — the frosting on the cake." 

Most anyone who investigates computer crime- 
knows of Schmidt or his expertise in computer 
forensics. 

When asked if he was a spook during his military- 
days, Schmidt smiles slyly, but won't answer. A former 
OSI agent who has attended some of Schmidt's foren- 
sics classes explains why. 

"OSI agents wear two hats:There's the criminal hat 
for domestic investigations — hacking, drug cases, kid- 
die porn, homicide, illegal use of our systems," says 
Brian Koref, who is now a system security project 
leader for Conxion, a Santa Clara, Calif., application 
hosting start-up business. "Then there's the counterin- 
telligence hat for investigating foreigners targeting the 
American government, suspected spies or informants." 

While at the OSI, Schmidt grew tired of military poli- 




Farmer military cyberspook 
Howard Schmidt now 
puts his talent to use at 
Microsoft. 



tics because they blocked him from doing his job.The 
need to fight for financial and personnel resources 
against co mp e ti ng budget interests, government rigidi- 
ty and lack of teamwork were just a few of the prob- 
lems. He says there are ux> many chiefs in the military: 
"When too many people are in charge, no one is in 
charge." 

From a corporate viewpoint. Schmidt contends that 
most information leaks are the result of poorly config- 
ured operating systems, firewalls and access privileges. 
And don't even get him talking about executive aware- 
ness. "There are still some out there who don't think 
securely about their information assets." he says. 

Schmidt also questions the backgrounds of "new-" 
computer security experts and worries they will alter 
evidence because the) haven't taken the time to learn 
proper evidentiary procedures. 

Consolidating Microsoft's information security into 
one business unit is already paying off, according to 
Frank Holland, IT director at Microsoft. Security techni- 
cians are more proactive and responsive, and employ- 
ees are getting better at securing their own environ- 
ments, he says. 

That's good because hackers still insist Microsoft is 
their favorite target, even though the company won't 
release the number of hacking attempts made against 
its systems. 

"I personally don't advocate attacking any business, 
but Microsoft is the golden calf of the Industry? says 
New York-based hacker. Yetzer-Ra. 

Radcliffis a freelance writer in Northern California 
who specializes in reporting on high-tech crimes. She 
can be reached at DeKad@aol.com. 
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N.E.T. . . . making a 
global impact with our 
WAN solutions. 

N.E.T. provides mission-critical, multiservice WAN 
solutions for global carriers and enterprises. Our 
Promina'" ATM products manage voice, data, image and 
video traffic with astonishing efficiency. 

ATM, Datacom & 
Telecom Professionals: 

We have career opportunities in our 
Fremont, California headquarters, 
San Francisco, Dallas, Atlanta, 
Washington D.C., New York, Boston, 
London, Beijing and other major 
business locations around the world. 

• Sales 

• Service 

• Marketing 

• Engineering 

• Manufacturing 

• Information Systems 

Visit our booth at the 
NETWORLD + INTEROP 
CAREER FAIR 
MAY 11-13, 1999 

Send your resume to: N.F..T.. Employment Dept. 
NW0510, 6500 Paseo Padre Parkway. Fremont. CA 
94555. Email: apply@net.com (text only, no attach- 
ments). Fax: (510) 574-4018. N.F..T. is proud to be 
an Equal Opportunity Employer. N*. I. and ivwniiw ircrrade- 

■ .il. I <|n pm<-m IcitinoJopcv Irv, Clfft^i IW. All tight, reserved 







Network Equipment 
Technologies 

for details on employment opportunities visit: 

www.netcom 



You can 

build products.. 

j*or you can 

build an entire 

c om p a n y 




This is what is known as a 
no-brainer! 

After all, who could turn down the opportunity to join one 
of the hottest start-up companies around? At Monterey 
Networks, we're backed by the same companies who helped 
launch some of the biggest names in the industry. And we're 
looking to revolutionize the way the world communicates. 
So it's up to you. You can cither wait for the future of 
telecommunications. Or you can help create it. 

Product Marketing/Product Line Managers 

The ideal candidate will possess a strong technical background and customer 
experience m the telecom marketplace. Key roles include product definition, 
concept validation, product hfecycle (.PLO management and product planning. 
This rule will include managing strategic relationships with our suppliers and 
customer partners and the responsibility for the successful launch of our prod- 
ucts into targeted customer networks. 
Experience in the following areas is required: 

• BSEE or CS with minimum 5 years' related experience and advanced degree 
(MBA/MSEE) is desirable 

• Background in SONET. ATM. WDM and/or IP networking 

• Ability to combine technical knowledge, standards and marketing skills to pro- 
duce forward -looking product planning 

• Track record in a successful launch and profitability of telecommunications 
products is a plus 

Account Manager 

• 8+ years' telecommunications industry knowledge 

• Minimum of five years' sales experience with demonstrated success 

• Established relationships with executives in the architecture, planning and 
operatioas areas 

• Prior experience selling to the telco accounts in the area is required 
East Coast/Dallas positions available. 

Systems Engineer 

• 5+ years" experience providing networking support in a multi-vendor 
environment 

• Extensive knowledge of SONET, ATM and opiical networking knowledge and 
be customer oriented with strong presentation skills 

• Understanding of a lelco operations environment 

• Responsible for prc-sales support and/or post sales support of company 
products/systems 

• Provide product demonstrations and presentations to customer 
base as required 

East Coast/Dallas positions available. 

Please send resume to: Monterey Networks, Int. 
Attn: Human Resources, Job Code: NW, 
2280 Campbell Creek, Richardson, TX 75082 

Fax: (972) 671 0916; Email: hr@montcreynets.rom Primripfes only. EOE 



MONTEREY 

Intelligence in the Optical Core™ 
www.monleifynefs.com 
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Build tomorrow's 
network today 



At AT&T, we're changing the fabric of communications-creat- 
ing seamless connections between email, voice, Web, and fax. 
We're building a global packet infrastructure to provide 
secure networks for multi-national companies-through our 
global venture with BT. And we're working to deliver broad- 
band services direct to consumers' homes. You bet it's an 
interesting place to work. 

And now, AT&T Labs - the company's R&D unit- is looking 
for innovators to create tomorrow's services: Providing seam- 
less, easy-to-use, high quality, affordable communication 
between people and machines. 

AT&T Labs has the following 
NETWORK DEVELOPMENT opportunities: 

Systems Engineer: High-speed Packet (Frame Relay/ ATM/IP Network and Services 
Systems Engineer: High-speed Packet (Frame Relay/ ATM/IP) Services 
Systems Engineer: High-speed Packet (Frame/ATM/IP) Network Management 
Systems Engineer: High-speed Packet (Frame Relay/ ATM/IP) Network and 
Services 

Network Integration Test Engineer: Frame Relay/ ATM/IP Services 
Integration Test Engineer Frame Relay/ ATM/IP Network Management 
IP Network Engineer 
Frame Relay/ATM Network Suppori Engineer 
Advanced Software Technology in Internet Platforms Organization 
Software Developers 

Systems Testers 
Systems Designers 
Systems Integrators 
Network and Server Infrastructure Engineering 
Technical Project Management 
Network Security 
Software Assessment 
Network Performance Management 
Technical Program Management 

Send resumes to: 

AT&T Labs 
200 Laurel Avenue S. 
Room D3 2A-04 
Middletown, NJ 07748 

Find out more about our heritage of 
innovation and the technology of 
tomorrow at 

http://www.att.com/technology. 

i^ATsT 



AT&T is an Equal Opportunity Employer 



CAPTAI 




CHECK OUT OUR WEB SITE FOR A COMPLETE LISTING 
OF EXCITING NATIONWIDE OPPORTUNITIES. 

Please submit your resume to Ascend Communications, 
Staffing Department. Job Code: NW511-13: 



CORPORATE 
HEADQUARTERS: 
E-mail: jobs@ascend.com 
Fax: 510.747.2909 
Mall: 1701 Harbor Bay Parkway. 



E-mail: resumes.east@ascend.com 
Fax: 978.392.9682 
Mail: One Robbins Road. 
Westford, MA 01886 



One Ascend Plaza, Alameda, CA 94502 



www.ascend.co 

We are an equal opportunity employer dedicated to the strength diversity brings to our I 



Visit us at Networld + Interop Career Fair 
May 11-13 • Las Vegas Convention Center 
Room N109-N1 10 • Las Vegas, NV 

Enter to win a PIPELINE 85 ISDN Hub/Router - 
as the ultimate solution for all your remote access 
needs can also be your connection to a truly great 
career. Just drop off your business card or resume 
at our Career Fair booth. 

- AND - 

Don't forget to inquire about Ascend s Career 
Cocktail Reception at the Networld + Interop 
Show on Tuesday, May 11th from 6-7 :30pm. 
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THE BEST MINOS. THE BEST OPPORTUNITIES. 

OUR CAREER OPPORTUNITIES 
IN CONNECTIVITY TECHNOLOGY 
ARE LIMITED ONLY BY 
YOUR IMAGINATION. 




As an B-commeroe and technology leader, (he Fidelity Investments Systems 
Company (F1SC) is the nerve center of Fidelity's entire operation In fact. F1SC 
develops and supports voice/data/video communication networks lor 
all Fidelity localions, as well as providing 2-4x7 operational support for 
disirihuted diem/server computing platforms (UNIX, Netware, and NT) 
enterprise-wide We handle hOO.000 phone ealU and over 3 million 
Internet hits a day And we pioneered techniques like automated trans- 
fers over the phone 

We invest millions to acquire the best technology and hest people available 
If you'd like to join our team-oriented, innovative, dynamic enviainmcttt, 
contact us today We'll challenge youi skills NurtlUCVOUl lA-ni And 
enhance your expertise You'll also receive one ol the best compensation 
and benefits packages anywhere So come join a technology team that's 
revolutionizing the industry And plug into an opportunity that could 
really spark your career. For additional opportunities nationwide, please 
visit our Web Site at www.fidclity.com/jobs. 



Come visit us al the 
NetWorld + [nterop Career Fair 
Las Vegas, NV 
May 11-13 



Fidelity 



MHCRE 1S MM 



0 



Investments 



VSSTOPS PUT THEIR TRUST. 



If you are unable to attend, please e-mail your resume to: resumes@fide1ity.corn. 
For best response, paste your resume into your e-mail message and specify 
Job Code JFB80. By mail, send your resume to: Fidelity Investments Resume 
Central, Job Code JFB80, 82 Devonshire Street, Mail Zone: Z2K, Boston, MA 
02109. Our comprehensive benefits include: three-part capital accumulation 
plan with 401(k), comprehensive health/dental insurance, life insurance 
program with investment options, and company-paid pension plan. 
Fidelity Investments is an equal opportunity employer. 



Start>Ups 
are Hot. 




So is Hell 



Try Proven Success. 

Get the benefits of a start-up 
without getting burned. 




l*1*J 1 1 More Connected. 



Come and explore 
career opportunities at the 

NetWorld + Interop 
Career Fair 

Las Vegas 
Convention Center 
Las Vegas, NV 
Rooms NJ09 &N1 10 
May 11 &\2th l0-6p.m., 
May 13th 10-4p.m. 



w w w . 3 c o 
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Information j I 

Engineering 



Partnership For A 
Successful Career 



Partnering with AXIS is ;m opportunity to sucixeil. To hccin 
with, you will he working with .in exciting range ot award win- 
ning products, Including new and innovative solutions that are 
shaping the way people connect peripherals to the network. 
Couple that with a unique work environment that losters Inde- 
pendent thinking and a strong corporate culture, and you will 
have the right ingredients tor the right career. 



c 



ompetitive Benefits 



Axis is committed to providing their employees with the hest 
benefits to fit their needs. Our HR department can work with 
you to tailor a program that fits your lifestyle and career. 



Come & explore career opportunities 
at the MetWortd+Interop Career Fair 
in Las Ve^as, Room 7*109 & Ml 10. 

AXIS Communications, Inc 
100 Apollo Drive 
Chelmsford, MA 01824 

Visit Us At: WWW.AX1S.COM 
or e-mail us at: humanresources@axisinc.com 
Call Us at: 800-444-AXIS 
Fax us at 978-614-2021 

COMMUNICATIONS 




This is a prtuj' typical 
Bui, we're anything bin your typici 
company. So while we do, in fact, provide 
some of the most advanced networking 
products and services, including our 
revolutionary Novell Directory Services, 
thai doesn't make us a sterile 
cubicicccniric organization. On the 
contrary, wc provide an environment 
that's attractive in everyone. If you'd like 
■ jo define the future of the Internet, we've 
,, gui ilic coippany and careers with the 
perfrci Mirroundiiigi/r -■ 

•T rA . : . 




Lur, 



unch Break 



Consultants 

Join Novell Consulting - Tin Directory F.xperu ami travel ^0 6V'„ to GNIMMf *itev to provide planning ami 
A. tigri of Novell (iirc product* and teihnologiev Including NetWare • and ■ and NDS doign. Knowledge 
of at least three other core Novell product* needed; C.NE. FCNF. MCNF, CNI. MCP. MCSF preferred. 

Software Engineers 

Help m .I.- :,i< and develop ihc next generation of iiciworking votiw.m- volutionv In putting your I '( 
Java. Window*. NetWare and ND\ experience to <he ullimatr lev I DAI' and Seviiritv experience 
preferred. BS/MS OS. II, CF or equivalent required. 

Product Management 

You will be rcvponviNc for driving produit positioning, vtrategy and product definition I'roduit 
management/ ma ritciing/ market strategy experience ai well a* good leadership tkilli art evwntial. Financial 
forecasting, trend and I'M analyxiv vkillv arc evvential. (,ood writing and presentation ileitis are 

alto 1 1 I IN IK.]. 

Marketing 

Ctiliung v»ur complete undervtanding ol Novell products and partni 
landscape, you will communicate the saluc of Novell solutions m 
marketing/ sales/ ma rkcl analvsi* experience in the high tech industry m 
leadervhip and communication vkillv. 




nee i customer needv Your 
i H complemented by good 



Talk wiih our recruiters and hiring managers at the N+I Career Fair, Room N109 
PLEASE VISIT OUR WEB SITE FOR COMPLETE DETAILS. 
Oppartunttiti are available in our ( alifomia, I tab and V.S. field offices. 



t to: careerstynovell.com 



Natf steal afto 



Novell 



www.novell.co 
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VIORK HARD. 

MAKE MONEY!" 

- Barry Phelps, President & CEO, Netcom Systems, Inc. 



That's the NetCom Systems' philosophy. It's the kind of attitude that has made out impressive suc- 
cess possible ond attracted the brightest talents in the industry. At NetCom Systems, you'll join o corn- 
pony which is continually developing tomorrow's LAN/WAN networking technologies. A company with 
a management philosophy that enables you to champion leading-edge projects from start to finish . Con- 
sider joining our technically advanced operation. 

Product Managers, Marketing - Selected candidate will be responsible for all aspects of product 
marketing for osetof NetCom Systems' products. This includes detailed understanding and anticipation 
of customers' needs, technical definition of product requirements, effective execution of product launches, 
ond the creation of effective soles tools. Work with a cross-functional team including engineering, manu- 
facturing, support, soles, finance and senior management. Extensive technical background in netwoik- 
ing ond protocols. Thiee or more years of direct product marketing experience in the data communications 
industry. Must hove extensive knowledge of networking, protocols ond testing issues. Candidotes should 
have experience with and knowledge of industry standard test methodology and procedures (IETF & 
IEEE). Excellent communication skills required. Willing to travel extensively. BSEE or equivalent is re- 
quired. MBA is preferred. 

Software Engineers - Requires strong C++ skills; UNIX and/or Windows development experi- 
ence. Networking/Data comm background, especially IP, Ethernet, ATM, Frame Relay; cross-platform 
development experience, Tel, desirable. BSEE/BSCS or equivalent required. 

Firmware Engineer - Working with challenging technologies, Gigabit Ethernet, ATM and high-speed 
WAN products. Experience with TCP/IP, PPPand Internet touting protocols. Candidate should have BSEE 
01 MSEE with ot least 3 years experience designing and implementing embedded data communications 
systems. Ability to understand customer needs and translate to system design a must. Strong embed- 
ded programming/debugging ond experience with RTOS design also required. 

Senior Software Engineer - Working on design ond implementation of VoIP performance test 
systems. Candidote must have experience with packetized voice and voice codecs. Candidate should 
have MSEE or PhD with at lenst 5 years designing ond implementing packetized voice systems. Ability 
to understand customer needs and translate to system design a must. Strong communication skills oie 
required. Embedded programming/debugging design veiy desirable. 

Software Developers - The position involves developing user interface software and application 
softwore, using CASE tools and object-oriented design methodology to develop cross-platform-based 
softwore to support data communication network analysis and diagnostics. Strong C++ experience re- 
quired. Windows ond UNIX desiied. 

OA/Test Engineers - 2-5 years experience in Quality Engineering/Assurance of network analy- 
sis, protocol analysis or network switching/routing products. Recent working knowledge of 2-3 or 
more of: ATM, Frame Relay, Ethernet, Token Ring, Loyer 2 & 3 switching, IP routing (RIP, OSPF) . 
Ability to write, design and execute test plon and test documents, program in C, C++, Tel or Visual 
Basic. Experience with Test automation of GUI-based products, and use of scopes, logic analyzers 
and counters desired. 

Technical Support Engineer - Provide technical support to field engineers, technicians, product 
support and customers in diagnosing, troubleshooting and debugging computei networking equipment. 
Tasks may include customer installation, sales colls and training. Candidates must hove minimum 3 
years related customer support experience and 3 or more of the following: ATM, Frame Reloy, LAN/ 
WAN, Ethernet, Fost Ethernet, Gigabit Ethernet, Token Ring, TCP/IP, routers, bridgesand switches. Pro- 
gramming in C, C++ or Visual Basic is a plus. BSEE preferred. Excellent verbal communication skills, 
troubleshooting skills, great work ethic and ability to work well in a team environment required. 

Manager, Information Technology- Provide Architecture/Technology leadership and direction 
for growing and fast-paced technology company. Requires sound knowledge of business processes and 
the role information technology plays in maximizing the efficiency ond effectiveness of the enterprise. 
Guide ond monitor the design ond implementation of o Strategic ond Tactical IT Plon. Will be respon- 
sible for the company's Infotmolion Systems, locol Area Networks, Wide Area Networks, Servers, W EB 
and ISP. Must possess brood knowledge of technical product trends ond directions including, but not 
limited to: Internet and Intranet, network servers, and desktop security, business application implemen- 
tation, data occess, NT client/server technologies, WAN implementation, relational databases, etc. 1 5 
years experience with Computei Science degree requited. 

We offer excellent compensation ond benefits including Stock Options. If you believe in our credo, 
have the credentials we demand and are leady to woik hold, hove tun and make money, please mail/ 
FAX your resume to: NetCom Systems, 20SS0 Nordhoff Street, C h a t s w o r t h, CA 9 1 3 1 1 . 
FAX: (8 1 8) 709-0554. E-mail: careers@netcomsystems.com. You may olso visit us on 
our website ot: www.netcomsystems.com. We ore an Equal Opportunity Employer 

NetCom, 

SYSTEMS 



e-mail: tareers@netttmsyslems.tom 




MOVE 



YOUR MOUS 



Look into the monitor in your mind. See a future there? 
If not. come see GTE at the Network World Career Fair in 
Las Vegas. We are looking for bright, innovative people just 
like you. 

We offer a relaxed, family-oriented work environment. A 
generous salary with great benefits. And a chance to work 
wilh some of the most advanced technologies on the planet. 
And if that's not enough, you'll find the satisfaction that 
comes with knowing you're working at the top of your game. 
So if you're ready to move, grab your mouse and double-click 
on GTE. Abetter career just might pop up before your eyes, 

We're now recruiting experienced professionals in the 
following areas: 



TECHNICAL SALES 



Positions are available nationwide. 

•STRATEGIC ACCOUNT MANAGERS 

• Data communications and equipment 

• Internetworking, VPN, PBX, voice mail 

• Long distance 

Must have: 

• 3+ years sales experience 

• Strong data communications background 

•SALES ENGINEERS 

• Strong technical understanding of one or more: 
Cisco Router network configuration, ATM, 
Frame Relay or IP backbone network configuration 



OTHER TECHNICAL 



Positions are available in Dallas. 
Java, Windows NT, Unix, Unix Shell Scripts, System 
Design and Architecture, HTML, RDBMS,\Veb 
Development, C/C++, Sybase, Oracle, Informix and DB2, 
Client/Server or Mainframe 

Must have: 

• Some positions require a Bachelor's degree or Master's 
degree in a related field 

• Strong lechnical background and leadership ability 

• Broad range of experience for the different technical aspects 
listed above 

Click into gear, Move to GTli. If you arc unable to attend the 
Network World Career Pair in Las Vegas, 
please send your resume to: 



Fax: Toll Free (877) 859-2828 
gte.jobs@relops.gte.com 



PEOPLE 
MOVING 

IDEAS" 



www.gte.com/jobs 

An Equal Opportunity Employer 
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Enterprise Networking 

Systems (ENS) is a leading 
professional sen/ices firm specializing 
in internetworking solutions 
consulting for Fortune 1000 
companies. We were named Cisco 
Systems' Partner of the Year for 1996 
and Cisco Systems' End-to-End Solutions Partner of the Year for 1997. ENS has also been 
featured in Inc. Magazine's list of fastest growing privately held companies for two of the 
last three years. We currently have opportunities for qualified Network Consultants, all 
over the United States. 

San Francisco/Bay Area; Irvine, CA; Los Angeles, CA; Sacramento, CA; Baltimore, MD; 
Philadelphia, PA; Dallas, TX; Atlanta, CA; North Virginia; New York; New Jersey; 
Washington, DC; Chicago, IL; Detroit, Ml; Boston, MA. 



Consulting Services Managers 

Manage Network Engineering resources and 
engagements for an assigned region. You'll 
achieve revenue targets; hire, develop, and 
deploy pre- and post-sale network engineers; 
manage sales opportunity and workload plan- 
ning; and develop strong relationships with 
sales force to promote service opportunities 
from identification phase through qualification 
and solution creation. You'll also assess and 
specify detailed user service requirements for 
specific engagements; manage delivery of 
services; and work closely with sales to 
create and sell the service solution to the 
customer. 

Client Services Executives 
(services sales) 

Sell a full range of network consulting services 
to medium to large-sized companies. You'll 
close new accounts and expand existing 
customer relationships; gather and evaluate 
customer network and business data; 
recommend appropriate service solutions; 
generate and qualify leads (with telemarketing 
assistance); and provide proposals, presenta- 
tions and follow-up. You'll also be responsible 
for effectively leveraging the skills 
of a pre-sales services consultant and for 
reaching annual targets in sales and profits. 

Network Consultants/ 
Senior Network Consultants/ 
Principal Network Consultants 

Provide technical/business consulting to 
enable customers' emerging network 
strategies. Specific tasks may include internet- 
work design, router configuration, installation, 
and troubleshooting services. Also participate 
in the definition of customer requirements as 
well as propose and implement leading-edge 
internetworking solutions; identify new 
business opportunities and lead in their 
development. Project work may include 
network architecture, security and infrastruc- 
ture planning to support deployment of ERP 
applications. ENS will provide necessary train- 
ing and guidance for CCIE Certification (Cisco 
Certified Internetwork Expert). 



Network Application Architects 

Provide high-level consulting and make 
architectural recommendations on state-of- 
the-art networks. You'll lead the definition of 
customer requirements and propose and 
implement leading-edge internetworking 
solutions through network analysis of 
enterprise applications (PeopleSoft) by 
analyzing all 7 layers. You'll also review 
project goals and validate application and 
network environments by performing walk- 
throughs with network engineers, as well as 
review router configurations, analyze application 
traffic and isolate areas causing degraded 
performance and document results. 
Additionally, you'll make formal recommenda- 
tions pertaining to performance improvements 
and/or changes to test methodologies. 

All positions offer a competitive base 
salary, significant bonus opportunities and 
stock options. 

Come see us at 
NetWorld + Interop '99 
in Las Vegas on May 11,12,13. 



Or, send/fax resume to ENS, Attn: Staffing, 
370 Convention Way, Redwood City, CA 
94063; Fax: (650) 568-0185; 
E-Mail: jobs@ens.com 

EOE/AA 




ENS 



kes all 
difference 
in the world. 



Shared Medical Systems is a Fast 50 Winner. Translation 
- we were recently named by Deloitte and Touche as one 
of the 50 fastest-growing technology companies in 
Eastern Pennsylvania. Our 1998 sales were SI. 4 billion, 
lopping 1997 s sales which were the highest in the 
Company's history. 

Successful, powerful, with an impressive growth 
momentum - we definitely have it all going for us. 

And what drives thai success? SMS is the worldwide 
healthcare information systems leader. We have the 
broadest range of products and services available in our 
holly competitive - and booming - business sector. Our 
spectrum of application offerings helps health providers 
more effectively care for their communities and control 
their costs. 

Health providers use SMS systems and services for every- 
thing from tracking patient billing and insurance 
information to managing clinical records, scheduling 
appointments, storing medical images, and reviewing 
executive information, such as utilization rates across a 
health system. Customers can select technology most 
appropriate for their needs, including the latest 
client/server technology, in-house server computing, 
remote computing, or a distributed computing option. 
SMS offers technology, consulting, outsourcing, and 
education services. 

Our team of over 7.000 professionals is dedicated to a 
vision of improving health worldwide. If you want to do 
important work on the leading edge... If you want to 
make a difference in people's lives... 
If the concept of high technology with a higher purpose 
appeals to you... 



We should talk. 

visit our booth at the 
Network World Career Fair 

(opposite main show floor) 




www.smed.com 



EOE. 
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Join the Internet 

Revolution! 

TV and the Internet will never be the same! 

Be part of it — and change the way that millions of people communicate, leam, and play. 

If you're looking to make an impact on 
global communications - don't even 
think in terms of the old analog 
motif. Think high-speed. Think 
multimedia. Think (f-Homc. 
Based in the San Francisco 
Bay Area, 1 Home Network 
is much more than a cable 
modem connection. It's an inno- 
vative, momentous technology 
that's literally reshaping the online 
experience. Thanks to our high- 
speed, fully integrated multimedia 
service, we've revolutionized a true realm 
of interaction. It's a new way to work with infor- 
mation and people - for both business and sheer fun. 

And, with our advanced network design, we energize connections that leave 
traditional telephone modems in a tortoise-like state. Visually stunning. 
Lightening fast. And a technology base that offers greater levels of service 
than previously possible. 

So if you're truly interested in making a contribution to hot high-tech - this is 
it. When you join Home Network, you'll not only be a part of a leader - but 
the envy of the Internet community. The industry pioneer that's developing 
applications for next-generation interactive television, broadband multimedia 
applications and e-commerce. Not to mention the next wowing experience of 
the Web. Add our upcoming merger and technology alliance with Excite, Inc. 
- and the culmination is an unequivocal revolution indeed. 

Explore these opportunities with Home Network, and help drive the 
technical excellence that fuels our radical success. 




Application Developers 

QA Test Engineers 

NOC Analyst 

Network Engineers 

Routing Engineers 

Infrastructure 
Provisioning Engineers 

Technical Support 
Supervisors 



Telecommunications 
Analysts 

Technical Support 
Representatives 

Project Managers 

Sr. UNIX Systems 
Administrators 

Network Analyst 

C++ Programmers 

Web Developers 

Visit us at the NetWorld and Interop Career Fair 
May 1 1 , 1 2 and 1 3 at the Las Vegas Convention Center, Las Vegas, NV. 

©Home Network, 425 Broadway, Redwood City, CA 94063. 
E-mail: recruitingecorp.home.net; or Fax: 310-337-3326. 

For more information about our job openings and to apply on-line, visit us @ 
www. home, n e t / j o b s 



® Home Network 



Help us keep showing 
the world how truly 
amazing Intermedia 

Communications really is 



Website Management 
Field Operations 
Sales 

Engineering 
Information Systems 
Network Operations 



It's amazing what advanced communications 
know-how and technology in the hands of moti- 
vated, competitive, and entrepreneurial people can 
accomplish. An Integrated Communications Pro- 
vider, we are the nation's largest independent com- 
petitive local exchange carrier, a leading first tier 
national Internet carrier, and the third largest pro- 
vider of frame relay. 



EOE 



All band. All devices. All the time! 



Selected by X-Change and Phone + magazines 
as a Pinnacle Award winner for significant 
developments in service and innovation 

Rated by Forbes ASAP as a Dynamic 100 
Top Technology Company 

Honored by Boardwatch magazine as a "Top 
Three" U.S. Internet backbone provider 

Network World has named Intermedia as a 
Top 200 Growth Company 



" We're looking for people who want 
to take control of their destiny, want to 
help create a new kind of company, a 
new kind of industry." 

Dave Ruberg 
Intermedia President, 
CEO. and Chairman 



To apply for technical positions, email your resume and 
cover letter to: resume@intermedia.com. 

For sales positions, salesresume@intermedia.com 

|\ ^ EOE 

intermedia 

COMMUNICATIONS 



www.intermedia.com 
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Network Knowledge 



Power 



Your best 

career 

router 



"At International 
Network Services, 

a well marked 
career path keeps 

people moving 
up, not out." 

CIO Magazine 



Because you have all the intellect and energy needed 
to excel as an internetworking professional, many paths 
are open to you. So ask yourself: Where can you get the 
greatest challenges? What company will provide the 
support you need to learn and fulfill your potential? 

There's only one answer: INS. 

Yankee Group and Upside Magazine named INS the top 
consulting company in the high tech industry, out-ranking 
Anderson Consulting, KPMG, EDS and others. Red Herring 
Magazine has named INS to its Top 50 companies for 3 years 
in a row. Deloitte and Touche named INS the #1 fastest 
growing network solutions company in 1997 and #5 in 1998. 

Only at INS will your network expertise be optimized by 
going on-site to major companies and unravelling unique, 
complex problems... and by drawing upon vast intellectual 
resources such as INS' KnowledgeNet, our global clearing 
house of network solutions information. 

Career Opportunities Nationwide: 
Network Systems Engineers 
Network Security Specialists 
Network Management Engineers 
Account Managers 
Engineering Managers 
Software Engineers 
Technical Trainers 

NetworkWorld calls INS "a great place to work," citing 
excellent pay, bonus programs, and stock-ownership — 
but why not check out the complete story yourself? 

See us at NetWorld + Interop '99! 
Las Vegas Convention Center 
May 11, 12 + 13 
Rooms N109 + N110 

If you are unable to stop by our booth, please visit our Web 
site for more information about these careers and the other 
outstanding benefits INS provides, and then e-mail your 
resume directly to staffing@ins.com. Please mention code: 
JF-INTEROP in 
the subject line of 
your message. 
An Equal 
Opportunity 
Employer. 
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INTERNATIONAL NETWORK SERVICES 

The knowledge behind the network?' 
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At Sprint 
Para net, we 
take a few 
things 
seriously: 
Technology. 
Success. Career 
Development. That's 

how we've become a leoding provider of 
distributed network management solutions 
for the Fortune 1000. We'll give you a 
chance to push the limits, and be 
rewarded. You'll see your biggest 
ideas put to use. Ana since we're 
vendor-independent, you'll work 
with a host of technologies, Sound 
like fun? 
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Senior Network 
Architect 

Will be responsible for providing, consul 
tation, project management, technology review and 
telecommunications design in WAN, LAN, remote com- 
puting, infrastructure and industry standards within global 
multi -protocol networking environments. Position requires 5-10 
years' related industry experience with multiple platforms 
experience. 

Network 
Analyst 

Will be responsible for the 
design, planning and imple- 
mentation of enterprise- wide 
WANs and LANs. Expert 
knowledge of protocols 
such as TCP/IP, 
SNA/SDLC, SNMP and 
RMON II is required. 
Familiarity with Netview, 
Optivity and Sniffer diag- 
nostic tools a plus. 

Network 

Security Consultant 

Will be responsible for performing Information Security Maturity 
Assessments (Benchmaricingl and Business Impact Analysis, creating 
high-level strategic Security Architecture Designs, and writing 
Information Security Policies, Standards. 

Ready to join Sprint Paranet? Then bring your best ideas with you. 
Because in addition to an excellent compensation package, we pro- 
vide an open, innovative environment where creativity flourishes. 
Qualified candidates should forward resumes to: 
Sprint Paranet, Job Code N WO 5 10; 
Email: eagles-interop@sprintparanet.com 
(text format is strongly preferred) or 
fax to: 888-525-7476. EOE, m/f/d/v 

www.sprintparanet.com 



Splint Sprint Paranet 

Integrating Hardware, Software. 
Networks & People 
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tWr/r over /500 off/re Global 2000 
corporations as customers, it's no 
wonder VERITAS SOFTWARE is an 
exciting place to be We're the largest 
independent developer of end-to-end 
storage management solutions. We cover 
the UNIX and NT markets from 
workgroups to enterprises. Best of all, 
we re growing at the rote of 65% a year. 
If you're looking for a company that 
thinks fast and moves fast, don't delay- 
Explore the many opportunities in our 
many locations around the country. 

SiimiiiiM Uniuuprninr 

• GUI Engineer 

• UNIX Kernel Engineer 

• NT File System Engineer 

• Sr. NW Protocol Engineer 



ntflRKITinG 



• Product Managers 

• Product Marketing Managers 

• Program Managers 

• MarCom Manager 

• PR Specialist/Writer 

• Graphics Designers 

HR 

• Technical Recruiter 



VERITAS 



iVirf HIlli 111 jUPPOBl'r 

Titfliwnii 

• Web-Based Course Developer 

• Jr. Technical Support Engineer 

• Sr. Technical Support Engineer 

• Sr. Technical Trainer/ 
Course Developers 

• Instructional Designers 

• Web Developer 

tin minim Hi Suns & 
Svsi i nis I ni>inn Hinh 

• OEM Account Managers 

• Sales Representatives 

• Systems Engineers 

• Senior Consultants 

• Briefing Center Specialists 
Mtn. View 

VERITAS Software offers outstanding 
compensation & benefit packages, 
including 401 K. ESPP, Stock Options & 
Educational Reimbursement VERITAS is 
an EOE with a corporate commitment to 
diversity. Please forward your resume 
to the corporate office at: 
VERITAS Software, attn: 
Staffing, 1GOO Plymouth St. 
Mtn. View, CA 94043, 
Fax* (6S0) 526-2515 
Email: jobs@verftas.com 
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eas Become Bigger When You Encourag'e Your 
Employees ToE xpress Themselves On The Walls 



Wall -sized white boards arc just one way our environment will help you Capture your 
creative brilliance as you help drive Nokia's entry into the global IP networking arena. 
Creative freedom, recognition and opportunity arc a le w others. 

Based in the heart of Silicon Valley. Nokia's IP Routing Business I 'nit has developed the 
valley's hottest R & D team in an environment that combines the ambiance, ingenuity 
and energy of a start-up with the technological and financial strength of a proven. 132 
year-old global, telecommunications leader. 

If y ou're ready to express your thoughts in new w ays and start turning your ideas into 
masterpieces, consider one of the following Mountain View based career opportunities 
with Nokia. 



Research & Development 

Seivral outstanding opportunities exist for 
individuals looking to play a key role in 
the development Of our next-generation il J 
networking products. Ail positions require 
a BSEE/CS (or equivalent), IP Networking 
experience and a proven track' record of 
delivering products Multiple positions 
available for all levels of experience. 

• OS Systems Software Managers 

• OS Kernel Engineers 

• Device Driver Engineers 

• System Performance Engineers 

• firmware Development Engineers 

• UNIX Kernel Engineers 

• MP I NIX Kernel Engineers 

• I/O Software Engineers 

• Communications Firmware Engineers 

• I/O Sustaining Engineers 

• Performance Engineers 

• Network Interface Design Engineers 

• Processor Sy stem Design Engineers 

• Sy stem Administrators 

• Senior Hardware & Systems Engineers 

• ASIC Verification Engineers 

• Networking Tesi Development Engineers 

• VPN Test Engineers 

• Networking System Software Engineers 

• System Software Development Engineers 

• Routing Development Software Engineers 

• Customer Service Engineers 

• Network Management Systems Engineers 

• Infrastructure Development Test 
Engineers 

• Hardware Board/Systcmlcvcl Design 
Engineers 

• Customer Support Managers 

• Customer Support Engineers 



Marketing 



Scleral ground-floor opportunities pertain- 
ing tt> the devetopmeni and execution of 
Xok/o's datac om strategy. Requires bands- 
on marketing experience focused on one or 
wttre of the following aretis: Data cnnmiu- 
uicttlions. network security. lS/ J s/'tetct>s and 
channel marketing. 

• Technical Marketing Engineers 

• Product Marketing Managers 

Sales 

Scl eral positions for multiple locations 

requiring related backgrounds in 

networking (data communications) 
and demonstrated track records selling 
to VAK/ISI' customers 

• YAR Sales Development Specialists 

• System Engineers - Multiple Locations 



Stop by and visit us at the 
NetWorld + Interop 
Career Fair 
May 11, 12, and 13 at the 
Las Vegas Convention Center 
Las Vegas, W 



Please forward a resume indicating 
position of interest n>: Nokia. IP 
Routing, 313 Fairchild Drive, Mountain 
\ lew,< A 94043; l ax: (650) 691-2170; 
Email: jobs'" iprg.nokia.com. EOE. 



NOKIA 

Connecting People 



www.iprg.nokia.com or www.nokia.com 
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Comverse, 
a world leader in 
Telecommunications ft 
Monitoring Systems, is 
seeking the following 
professionals with a 
competitive edge to join our 
ATLANTA. DALLAS, KANSAS 
CITY, LONG ISLAND b 
LOS ANGELES locations. 

SR& JR 
SYSTEMS 
ENGINEERS 

BSEE or BSCS and at least 
three years experience in 
the computer or 
telephony industry are 
required. Responsible 
. for supporting and 

integrating large scale 
telecommunication 
systems and 
projects involving 
computer and 
telephony technologies. 

Position involves 
integration, acceptance 
testing and support. 
International and domestic 
travel required. 

PROJECT 
MANAGERS 

At least 5 years of 
telecommunications or 
computer systems 
and Program 
Management experience 
required. 

Mail/fax resume, stating 
position of interest and 
salary requirements to: 
Human Resources, 
Comverse, 
170 Crossways Park Dr, 
Woodbury, NY 11797 
www.comversens.com 
Fax: 516-677-7136 
or e-mail to: 
careers@comverse.com 



)AT&T Solutions 



AT&T Solutions , the networking ami 

and one of the fastest-growing units of AT&T, 
delivers worid-class global networking strategies to 
the worid*s leading companies. With practical 
expertise in data networking, industry knowledge, 
and visionary thinking, our greatest asset lies in the 
extraordinary skills and knowledge of our 
professionals. We sell and take responsibility for 
day-to-day management of the entire infrastructure 
as well as manage long-term strategic, planning, 
and design issues. It's a career that demands 
constant discovery and learning, because the 
formula for success is rewritten everyday. 



Networking thi N» 



Come join AT&T Solutions as we lead the way in 
delivering services and solutions to 
comprehensively support the dynamic entity that 
the corporate multimedia network has become. 

Systems Engineer 

Responsible for the design, engineenng, and implementation of a customer data 
network. Requires in-depth expertise in one or more specific data networking 
products or services such as Multiprotocol Networking, InternetA/PN Solutions, or 
Carrier Services Engineenng. The area of specialization must include direct hands-on 
implementation experience and industry or vendor certification. Specific areas of 
technical expertise include Router Networking (Cisco/Bay Networks], Networking 
Protocols CIP/OSPF. SNA), and Networking Services (ATM. Frame Relay. ISDN PRI/BRI). 

Integration Engineer 

Responsible for the specification and documentation of all physical and logical details for 
a network location. Requires in-depth knowledge of the physical attributes of networking 
hardware and familiarity with networking services and networking equipment 
(multiplexers, CSU/DSUs. modems) for interfacing to Network Services. Also requires 
knowledge of data center design, equipment testing and installation practices; attention 
to detail; and excellent PC skills; 3+ years of industry experience and an Associate's 
degree in a technical field or equivalent industry training preferred. 

Systems Architect 

Individual serves as the technical team leader for the design, engineering and 
implementation of Enterprise Data Networks, and has overall technical responsibility for 
delivery of the solution from project inception through the transition to life-cycle. 
Candidates must have a broad understanding of networking technologies and customer 
network applications, and in-depth expertise in one or more specific data networking 
products or services such as Multiprotocol Networking. IntemetA/PN Solutions, or 
Carrier Services Engineering. The area of specialization must include direct hands-on 
implementation experience and possible industry or vendor certification. Good 
presentation skills are required; 8+ years of industry experience; and a BS/MS degree in 
Computer Science or Engineering is preferred. 

Network Engineers 

Apply your data networking skills by designing, testing, and documenting router-based 
solutions. Develop LAN interconnect solutions/offers using Cisco or Nortel (Bay 
Networks) router. LAN operating systems and protocols. AT&T WAN and/or IP services, 
and modems/DSUs/multiplexers. Must understand new software and hardware features 
and/or releases from router vendors developing solutions. Candidates will obtain 
customer requirements, plan and build lab test environments, perform tests, document 
solutions, and train technical team members and work center support personnel. 

Tier III Technical Engineers 

Requires 3-5 years WAN maintenance & implementation experience; CSU/DSU familiarity; a 
BS degree; and extensive experience with IOS configuration & upgrade, Cisco/Cabletron/Bay 
Networks, and IP routing on Cisco products On a X25 switched network). 

Tier II Technical Engineers 

Requires 2+ years LAN/WAN experience; a BS degree; 1 year experience IP routing on 
Cisco products; and experience with IOS configuration & upgrade and 
Cisco/Cabletron/Bay Networks. A UNIX background is a plus. Knowledge of HP 
Openview and Network Node Manager is beneficial, 

Tier ll/lll Voice Engineers 

Requires the ability to manage multiple vendors, maintenance contracts, billing and 
escalations in a reactive environment Strong organizational and escalation skills are 
required to coordinate with AT&T Network Management Centers in support of AT&T 
client global transport network (VTNS. 800 service). Knowledge of network services must 
be complimented with an in-depth understanding of PBX Move. Add and Change 
(MAC), PBX features, manual ring down circuits. Tl, private lines over IDNX & 
CSU/DSUs. Understanding of Lucent Technologies (Definity) router (3Com. Cabletron, 
Optivity. Nortel, Oct el] an added plus. 

Systems Analyst 

Position requires an Analyst with systems administration skills. Responsibilities will 
include administration & day-to-day duties involving: 
Software 

• UNIX system administration • UNIX • NT & HP-UX software installation 

• UNIX shell • HP Network Node Manager 4.1 "HP IT/Operations • Microsoft Windows 

• X Windows • Application Administration 
Hardware 

■ HP 9000/7xx Workstations • Sun Sparc * Desktop Workstations (PCs running 

Windows NT) • HP 9000/8xx Servers 

Others 

• Performance management * Problem -solving and decision- making ■ Basic LAN/WAN 
networking concepts • Participates in weekly rotation of 24x7 on -call pager 

To submit your resume (referencing job code NW99). or to find out more 
information about these & other opportunities, visit our website at: 

hUn://www. iitt.com /solutions 

AT& T Solutions is an Equal Opportunity tmptoyer. ^^^^^^^m 
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Data Services 



J These positions are part of a nationally 
deployed Data Services Engineering team 
ft responsible tor providing Tier 2/3 technical 
consultative support. 




Technical Sales 
Support Engineer 
Nationwide Openings 

You will be called upon lo: 

• Assist sales teams and customers in assessing 
customer application requirements and develop- 
ing short-term and long-term data networking 
solutions. 

• Perform pre-sale technical assurance of data 
networking solutions. 

• Provide feedback to Product Mngmt/Mktg on data 
networking needs of market/customers. 

• Conduct knowledge transfer programs to field 
sales force. 

The professional we seek will possess demonstrated 
knowledge of data networking solution design 
including: 

• 5+ years exp. in pre-sale technical sales support 
or equivalent. 

• WAN <e.g.,TDM,SONEIFR,ATM,IP) and LAN 
technologies. 

• Data networking equip (e.g.,CSU/DSUs,routcrs, 
switches, firewalls). 

• Internet, intranet, and extranet solutions 
(e.g.,VPDN,GDR,DNS,SMTP). 

• Protocols <e.g.,FR,ATM,TCP/IP,IPX,SNA,etc.). 

• Strong PC, interpersonal, and presentation skills. 

• BSEE, BSCS, or equivalent degree pref. 



Senior Data 

Engineer 
Rochester, ny 

You will be called upon to: 

• Establish and maintain the data network architecture. 

• Deploy ment of national Frame Relay/ATM infrastructure. 

• Certification/testing of network devices. 

• Capacity planning. 

• Pre-sales support as required. 

• Research and design new products and services. 

• Development and documentation of engineering 
standards. 

Required experience and specific competencies: 

• At least 6 years of diverse data communications 
engineering experience of ATM/Frame Relay/IP 
Router networks. 

• Proven track record of accomplishments. 

• Good oral and written communication skills. 

• Project management skills. 

• Frame Relay/ATM network standards & design concepts, 

• LAN protocols : RID, OSPF, ICRP, BCP, PNNI, B-ICI. 

• Signaling: ATM/Frames UNI, Q.931, SS7, CAS. 

• Management protocols: SNMP. 

• Ethernet HOBaseT, 100BaseT), Token Ring, H99I. 

• Circuits: T-l, T-3, Fractional T-l, ISDN, SDH 
Hierarchy, SONET, DWDM. 

• Network analyzers: NG Sniffer, ATM/Frame analyzer. 

• OS: DOS, Windows/95/98, Unix/SUN Solaris 

Additional background in the following is highly 
desirable: 

• International network design/implementation. 

• Voice over IP design implementation 



For immediate consideration, send/fax resume to: Corporate Staffing-ML, 
Frontier Communications, 1 80 South Clinton Ave., Rochester, NY 14646; Fax: 800-676-3728; 
Email: resume_administraton§ , frontiercorp.com We value diversity in the workplace. EOE. 
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Buy one Get one at 50% Off* 



To get maximum exposure for your 
Recruitment Campaign... 

• Place an ad in the Networking Careers Section of Network World 

• Then receive 50% off* on the repeat of an ad within 4 weeks 

Talk to Network World 
800-622-1108, Ext. 7454 

'The repeat ad must be scheduled when the original ad is placed. Restrictions may apply. 



keep up 
with a 

fast-moving 
market 




The world's 
already wired. 
PairGain 
brings it up 
to speed. 



Bring your career up to speed with 
PairGain Technologies. Inc., the world 
leader in the design, manufacture and 
marketing ol DSL (Digital Subscriber 
Line) networking systems. Our family of 
DSL-based products and systems 
allows high-speed, fiber-optic quality 
transmission over existing copper 
telephone wire and puts us at the 
forefront of the advanced digital 
communications industry. If you'd 
like to join a company strategically 
positioned for continued growth in a 
rapidly changing market, consider 
the following openings in our Tustin. 
CA-based Corporate Office: 

Training Manager 

Product Marketing 
Manager 

Product Manager 

Marketing Development 
Manager 

RFP Writer 

Product Support Engineer 

EDI/E-Commerce Project 
Lead 

Test Engineer 
Sales Manager 
Sales Engineer 
Customer Service Engineer 
System Engineer 
Software Engineer 
Firmware Engineer 

Visit us at jobs@www.pairgain.com 

for more details. 

PairGain oilers rewarding careers, 
competitive compensation and a 
dynamic work environment. To apply, 
please send your resume with salary 
history to: 

PairGain Technologies, Inc. 
Attn: Corporate Employment 
Department, KF/NW 
14402 Franklin Ave. 
Tustin, CA 92780-7013 
Fax: (714) 730-3199 
e-mail: hr@pairgain.com 

Equal Opportunity Employer. 



> Pair Gain 

www.pairgain.com 
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DATA, VO 
NETWORK 



ICE, AND 
SERVICES 



Ihe folk wing < >(">j> mviai;w.> .in- Rvalopli In AUluill, Italtiiimrv. 
Dallas. Denver, Des Moines, San Francisco, Nah lake 
City. SearUc, Chkax°> Lo* Aura-Io, and Portland. 



THE POWER O F 
CONVERGENCE 

Vfci? an; Gmvttxent CtniMiiunications. a single- source provider of 
inlegraled dila. voice, aiul Iniemei UHiimunrarjons services for 
mtuII anil nikl-si/ixl I » lshvnscn U'nli .m eiut.*rjmst--wide commit - 
mrni In (HiLsUndinK customer service, our (>o£intzauon relies iai 
hiring only I he Ix-M anil brightest Lileni In sup|>at our mission. 
Simply pui. oiir mission is to allow clients to tixus on dteir core 
business opportunities, mil tlx* ledindoRV Miprxirunx ilxir divines. 
As an cmplojw. Converiteru Communications is conunitiul to the 
ongoing uevelopmeni of a culture that encourages personal devel- 
opment, career-path oppnminiiies, and "«Kitsklc-the-box" thinking 
VSe realize that our employees arc our greatest asset. As such, we 
offer them and their families excellent benefits anil compensation. 

To lake tlxf next step toward fulfilling your career and personal 
amhitkms. semi your resume and salary history KX Otmergcnt 
Conutiunicatioas Services. Inc.. ATTN: NW. -1(10 Inverness Dmv 
South. Suite KK). F.nRlewood. 00 801 12: RAX Q0S> 749-3009; 
e-mail; hrfPconveig -com 
No phone calls, pk-ase. K( )K 



Intern el Services 

The Internet Services 
group is responsible for 
providing an Internet 
Web presence to clients, 
supporting their Internet, 
intranet, and extranet 
needs We provide custom 
Well site ami application 
design, Internet access, 
and hosting .iixl consult- 
ing sen iles We are seek- 
ing team-onented profes- 
sionals to fill the following 
positions: 

• Internet Sales Support 
Specialist 

» lYoject Manager 

• Design Director 

• Production Director 

• Graphic Designers 

• Programmers 

• lYoduccr 

• Webmaster 

• Proposal Support 
Manager 



Enterprise- POP 

Hits division designs, 
develops, introduces, 
and manages the lifecycle 
i/ Convergent s product 
and services portfolio 
I*nxJiKVservtce sectors 
include professional 
outsourcing services, 
data voice video products 
integration, as well as 
carrier services. Our 
current service offerings 
include, but are rv< limited 
to: IP, ATM. frame relay. 
Internet access, and 
XD9L Our current suiting 
needs include: 

• Network Sales 
Support Manager 

• Sales l'jigineering 
Specialist 

• Local Service Sales 
Engineer 



7 



CONVERGENT 

COMMUNICATIONS* 



Visit us at: www.converg.com 



Enterprise Network Services 

This division devcl<»ps. supports, and manages the If wig - 
tenn rebtioaship wttli Convergent clients as their commu- 
nications sysiems partner Our goal is to provide wortd- 
itass delivery, program management, ami preeminent 
client care To accomplish Uus. we are seeking profes- 
sionals who possess a proven record of developing, 
supponing. and managing such client relations! tips in 
lomhirulion with exceptionally strong oral and vvntlen 
comiminicaiioiis skills and the ability to anticipate the 
needs of our clients ai»d manage Uk- enure delivery- 
tlin»ugh-sup(xjn process. 

• Business Integration Coordinator 

• Director of Tech Engineering 

• Director of Sales 



for More Information on Advertising in Networking Careers 
Contact ]'800'bzz-W8 
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OPPORTUNITIES 




Westlake Village, CA 

it, there was the Telephone, 
icn, there was the Internet 
Now, there's NetZero. 

NetZero. one of the hottest High-Tech Startup 
Companies, is changing the way people perceive 
and use the Internet. The NetZero team is com- 
prised of industry leaders dedicated to innovation, 
and as we continue to grow, our need to add great 
talent increases. If you embrace the Web and have 
a vision for the future, we want to hear from you. 
The following positions are immediately available: 

SENIOR UNIX SYSTEMS ADMINISTRATOR 

(JOB CODE: SUSA/NTW) Reqs: 3* years Network 
Engineering experience including ISP, UNIX, 
routing & NFS. 

OPERATIONS MANAGER (JOB CODE: OW/NTW) 

Reqs: 3+ years management experience including 
knowledge of running a 24/7/365 Operation. ISP 
experience is a plus. 

SECURITY ARCHITECT (JOB CODE: SA/NTW) 

Reqs: 3+ years security experience in a heteroge- 
neous IP environment. ISP experience is required. 

We offer highly attractive compensation packages 
with outstanding benefits including 401 (k) plan and 
stock options. For immediate 
consideration, please fax your 
resume to 818-879-7257. Attn: 
HR Mgr. Job Code. Or e-mail: 
randeem@netzero.net with Job 
Code in the subject field. EOE NetZero 

www.netzero.com 




NETWORKING 
CAREERS 
ON-LINE ADVERTISING 




nvtrfusion. 



Network World Fusion offers 
a wide range of advertising 
options to optimize your 
recruitment efforts! 

Network World Fusion brings 
print and on-line media 
together in a powerful and 
unique package. Fusion 
spotlights key news and feature 
articles from the print edition of 
Network World, adding another 
dimension for your ongoing 
recruitment efforts. 



C For more information on 
Fusion Advertising Programs 
(800) 622-1108 Ext. 7454 



www.att.com 
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The Future I 

is a Place. 



iAT&T 



The future is not a time to be anticipated. It's the place in time where 
the possible is realized. And it's happening today at AT&T. As the global 
telecommunications industry grows, so does the level and intensity of 
competition. At AT&T, we build on our achievements and seize new 
opportunities worldwide by relying on our employees. We believe that 
tenacity in the face of fierce competition and dedication to winning are 
among the key attributes required for success. That is why our people are 
our major competitive advantage for the future. 

OPPORTUNITIES 1TM NEW YORK CITY 
& NEW JERSEY! 
CLIENT BUSINESS MANAGER 

This position demands expertise in developing business solutions at the highest 
levels of a customer's organization. Competitive awareness is the key, along 
with knowledge of client voice and data network applications and emerging 
technologies. A minimum of 1 year's sales experience in a business selling 
environment, a solid knowledge of telecommunications, and a Bachelor's degree 
required. AT&T product knowledge and an MBA are highly desirable. 
Job Code: NW9O510060. 

INTERNET PROTOCOL NETWORKING 
CONSULTANT 

As a member of the AT&T team, you will apply sophisticated e-commerce and 
data network applications to meet a broad range of business challenges. 
Qualified candidates will possess a unique combination of skills and expertise 
including a minimum of 2 years' successful outside sales or consulting 
experience in e-commerce Internet/Extranet/Intranet applications, together 
with a working knowledge in several of the following areas: LAN/WAN. Routers, 
and Firewalls/ATM/Frame Relay. Job Code: NW90510049. 

DATA SALES EXECUTIVE 

As a member of the AT&T team, you will demonstrate a unique combination of 
sales skills and data networking expertise. Your main goal will be to identify 
opportunities to expand our customer base by using a consultative approach as 
you provide technical expertise to potential and existing business clients. 
Qualified candidates should have a strong knowledge of data networking 
technology and applications, client/server environments, routers, protocols, and 
local area networks. Bachelor's degree preferred. Job Code: NW90510065. 

All positions listed above require telecommunications experience. Only 
candidates with telecommunications experience will be considered. 

AT&T wants you to build your capabilities and grow with us. We are committed 
to your development by offering state-of-the-art technology and immense 
resources to fuel your growth as well as generous salaries and benefits. 
Qualified candidates should FAX their resume and cover tetter (Indicating 
appropriate Job Code from above) to: (973) 984-7324. Or email to: 
ads@ems.att.com (ASCII text only, no enclosures). You must reference 
appropriate Job Code from above in resume or cover tetter, or as subject of 
email. 

AT&T ii an Equal Opportunity Employor 
We welcome and encourage diversify in lh« workplace 





BERMUDA 


Trout Trading Management Company Ltd. 




• Manages an open- 


TTMC is looking for an exceptional 




ended Bermuda 


individual for the position of: 




mutual fund company 
with assets over 


Nortel PBX Administrator 




USS 14 Billion which 


• Primary contact for IPL circuits, frame 




operates 24 hours 


relay circuits, T1 circuits, ISDN lines. 




a day, trading on global 


HDSL lines and voice COT's with local 




financial markets 


and long haul telco companies. 




• Uses state-of-the-art 


• Administer 2 Nortel Option 61C's, 2 




technology to support 


Option IIC's and 3 Companion Wireless 




its fast-paced, exciting 


Systems, running Release 22-23. 




trading environment. 


• Maintain Tl Multiplexers, voice/data 




• Manages a global voice 


Multiplexers, CSU's, DSU's. 






and data network 


• Manage international data network of 




comprised of frame 


Cisco Catalyst 5500, 2600's, 2500 s. 




relay circuits, IPL 


• Responsible for testing and evaluating 




circuits, routers. 


new equipment. 




multiplexers. 


• Experience with PCSl.Timeplex and 




networked PBX's and 




10/100 base T ethernet. 


Cisco a plus. 


Email: leaw@ttmc.com Fax: (416) 956-4715 


Relocation to Bermuda and a 3-year commitment are required. 


No telephone calls please 



Success in a competitive world 
requires the right connections. 



Wow!!! What a great site. I used 



this site to announce my availability and 



within two weeks was working at 
a new job 



making 
more money 
and closer 
to home!!! 55 



high tech jobs 



.dice.com 




> dice com 

High tech jobs online 



Change ups, curve balls, fastballs, knuckleballs, sliders, no matter what type of challenge the 
opposing pitcher presented, it could not stop Mark McGwire from making the perfect baseball 
connection an astronomical 70 times. At NetScoul Systems, we've achieved a similar level of success 
in the networking industry by helping our clients maintain the perfect connection between their 
network and their business. Our AppScout product takes the guesswork out of the diognosis of 
slowdowns by connecting network managers with solutions to mission-critical problems before they 
happen It's sort of like telling Mark McGwire that the next pitch is going to be a fastball on the inside 
corner - bombs away. We are equally adept at connecting talented people with the best career opportunities in the 
business, but you better apply soon, before these positions are going, going... GONE!! 




SALES 

District Managers 

Locutions, \orfftern CA, GrtM f akes area. 
North Carolina, Belgiiim/Niilu'rlaruk 

Musi have ')- faUt experience in major accounts sales in the 
internetworking arena Develop new accounts and provide 
accurate forecast 

Channel Sales 

tdcotioiu: Chkagp/Midwcsl 

Looking for seasoned sales professional with strong 
channelsA'AR background in ihc Internetworking industry 

Applications Engineers 

/ ocatkmx Gnat I akes, Miami/1 aiin America. 

California, Germany, Iirlgiumf\etnrrland% 

Provide technical prc-sales support to our customers and 

distributors in all technical areas of NetScoul products Must 

have 4* years' experience and strong skills in network 

ii-ihnology, network applications and UNIX/NT. 

Post-Sales Field Engineers 

Locatioms: Dallas, Chicago, DC, Sun f rancisco 
Provide technical post-sales support to NetScoul customers. 
Requires 34 years' experience with LAN/WAN. Network 
Applications and UNIX/NT 



MARKETING 

Director of Product Marketing 

Ursf/ord. MA 

Dynamic, creative marketing pro to manage product launch, 
competitive analysis and selling. Provide content for markeimg 
and selling tools and company Web site Drive pricing process 
and pnee list Strong tnaruigcmeni skills 

Public Relations Specialist 

Wcstford, MA 

Work with thr director to plan and execute -ill aspects of PR 
projects and programs Work with and manage PR agency. 
Hfatcgixc communications wilh ihe press and analysis Must 
have 3* years' experience and hands-on PR experience in a high 
tech etivitommm. preferably in Networking. 

Our outtfandtllg compensation and benefits package is 
designed to maintain a strong connection between our 
company and our employers. I or immediate i onsideration, 
please forward your resume to: NetScoul Systems, Attn: 
Staffing Dept., 4 Technology Drive. Westfoid. MA 01886, 
e-mail: siafftng^nctscoui com: fax: (978) 014-4273. 

New positions arc always opening in dilfercnt territories, I or 
complete details and a list of other available positions, please 
visit our Web she 



CRACK" there GOES NO. 70 



0^ W W . NETSC0UT.COM 



An Equal Opportunity Employer 



Your 

Ad 
Could 

Be 
Here 

For 



$820.00 



Call 
Recruitment 
800-622-1108 
for more info. 

(less if you 
have a contract) 



* Northchurch Communications Inc., 

a hot new start-up, located North of Boston, 
is seeking the following skills. If you strive 
for a challenging career with the opportunity to excel, 
consider the following positions: 



System Test Engineers 



Experienced in testing layer 2 & 3 protocol 
service equipment for carrier and ISP 
deployment. Several openings in a dynamic 
and true startup environment still exist. 



Software: Layer 2 & 3 protocol engineers 



Experience should include delivering 

products to market. 
Northchurch Communications offers an excellent 
compensation and benefits package. For considera- 
tion, please forward your resume, indicating 
appropriate title, to Fax: (978) 691-6300 
E-mail: hrtftn orthchurch.net 

www.northchurch.net 

Northchurch Communications is an equal opportunity employer. 



Got Hiring 
Needs? 



Talk To 



NORTHERN US 
Karimo Zannotti Ext. 7488 kzannott@nww.com 



REQUEST FOR INFORMATION # 99RF1B04 
COMMUNICATIONS NETWORK PROJECT & 
PUBLIC ADDRESS/CUSTOMER INFORMATION 
SCREENS PHASE II PROJECT 

The New York City Transit Authority Is engaged in multi-phased 
projects to ungrade (he NYCT communications network and cus- 
tomer communications systems. The Communications Network 
will support multiple applications for improving transit service, 
integrating voice, data and video communication over a single 
network, utilizing liber optic cable with Sonet and ATM equip- 
ment. An RFP tentatively scheduled for release in 1999. 
The Public Address/Customer Information Screens Phase II 
(PA/CIS) project will provide a modem public address system uti- 
lizing microprocessor controlled electronics. CIS units will provide 
customers with Iran arrival information along with other relevant 
announcements. PA/CIS will be a centralized system with sec- 
ondary remote control locations and will interface with other sys- 
tems under development Including Automatic Train Supervision 
(ATS). Subway Train & Traffic Information System (STATIS), 
Communication Based Train Control (CBTC) & PA/CIS Phase L 
NYCT seeks comments on the technical specifications for each of 
the projects. There is one RF1 for both projects as it was conceived 
as one project and will be split into two distinct protects after the RFI 
Is completed. 

Firms possessing the requisite qualifications and desirous of 
responding can obtain a copy of the Request For Information on 
or after April 28. 1999 by faxing a request on company letterhead 
and include RFI number and due date to (718) 694-4056/4210 
or by mail to: MTA New York City Transit. PO BOX 020831, 
Brooklyn, NY 1 1 202-0831 , Attention: Bid Document 
Requests RFI documents may also be obtained In person from 
the Bid Reception Desk at 130 Livingston St, Brooklyn, NY 
between the hours of 9:00 AM-4:00 PM, Monday to Friday 
except holidays. Responses are requested no later than June 2. 
1999. Following the written submission NYCT may choose to 
moot or correspond with selected RFI rosponents tc-t further clar- 
ification. This is a Request for Information, not a solicitation. 
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New York City Transit Going your way 




800-622-1108 



SOUTHERN US 
Sandy Weill Ext. 7542 sweill@nww.com 



ERING 

As one of the premier providers of internetwork 
consulting east of the Mississippi, RPM Consulting 
bases much of its success on hiring the best people 
and then giving them the training and employment 
opportunities to become even better. 

We currently are seeking senior and mid-level 
engineers in the following disciplines lor [est 
Coast and Midwest positions. 

— Network Security 
Design/Implementation 

— Network Management 
Design/Implementation 

■ Internetwork Design/ 

Implementation 
• WAN Design/Implementation 

For additional information, please visit our website 
www.rpm.com or mail/fax your resume to: 
RPM Consulting, 7130 Minstrel Way. Suite 230. 
Columbia, MD 21045 AtoxNW 
Fax 11101 309-6070 

Or send your resume electronically to: 
NW@rpm.com 

Web site: www.rom.cont 




L TING 



Dodi Rabinovitz 



DIRECTOR 
Ext 7454 drabinov@nww.com 
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Less is... 



Manage all of your servers with just one keyboard, monitor 
and mouse! The AutoView Commander eliminates the 
need for peripherals at ev ery computer. Fewer peripherals 
means less clutter and less wasted money. 



•-• npBH ..... 

MORE Room 

MORE Control 

MORE Cost-effective 

What more could vou want? 




1'*: .'i-^ 'y 

m 

Microsoft * 
Window NT' 



CytxxoV CjbOL k)gu,AutoView and Oimnundcr art irjdenurk>, or 
rrKrtcmd trademarks trf Otxrx (ximpuur Products Corporation. 



Contact us at CYBEX (800) 932-9239, 
fax (256) 430-4030 or 

www.cybex.com 

Come see us at NetWorld+lnterop, Las Vegas, Booth #7077 



WCyBEX. 

jfi&J )SSSl Computer products corporation 



#227 @ www.networhworid.coin/iiifoiiiress 



How Can We Connect Your Business? 



Audio 

Conferencing 




Satellite 
Services 





Videoconferencing 



To learn how your organization can harness 
the technology and increase productivity, 
call V-SPAN at 1-888-44V-SPAN or visit 
our web site at www.vspan.com. 




t 

a* - — 



Data 

Conferencing 



Internet Video 
Streaming 



V-SPAN 

Virtual Connectivity... Anyplace @ Anytime 



* 



#218 <s> www.netwofVworld.convlnfoKpress 
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NS80P - The Net/Station NS80P 
network enclosure is designed to house 
19", 23" or 24 " rack mount equipment. 
At 29" wide, the NS80P's extra width 
allows for even more cable manage- 
ment capacity and compliments the 
NS80 as a wiring enclosure. The 
NS80P's extra space also allows 
greater flexibility in mounting non-rack 
communication and network equip- 
ment. The NS80P, as with all Net/ 
Station enclosures, features reversible 
front and rear doors, and removable 
side panels that are key locked to 
ensure the safety of your equipment. 



NS80 - The Net/Station NS80 network 
enclosure is designed to house 19" rack 
mount equipment. With 42U of mounting 
area, the NS80 provides ample space for 
your network equipment. The front and 
rear doors as well as the side panels are 
keyed alike to provide security for critical 
equipment. Cable entry/exit through the 
top and bottom allows complete function- 
ality and provides an aesthetically 
pleasing server cabinet for any environ- 
ment. The NS80, like all Net/Stations, is 
expandable by connecting multiple enclo- 
sures together. 



Visit Booth #1559 or call 1-800-423-9911 for a free catalog. 




rk Rack Pack Is Back! 




The Net/Station family of network enclosures provides protection 
and organization for your servers and network equipment. Net/Station enclosures 
support standard 19", 23" and 24" rack mount equipment as well as non-standard network 
peripherals. A variety of enclosure sizes and options are available to support your networking needs. 

Integration Technology Systems, Inc. 
Phono: 1-800-423-9911 URL: www.net-stations.coni 



NS30 - Featuring 15u of 19" rack mount 
space in a 33.75" high frame, the NS30 is 
the ultimate network enclosure for critical 
space sensitive applications. The NS30 
maintains the security and flexibility of the 
Net/Station family of products while 
allowing easy storage in an office environ- 
ment. 
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NS40 - The NS40 is optimally sized to 
support your network and power protec- 
tion equipment. 42.5" tall, the NS40 
supports 20u of rack mount space. This 
smaller server enclosure was designed to 
support network applications with limited 
space. 




twotkwofld.com/inloKpress 
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ON-LINE PRICING AND ORDERING SERVICE 



PI 



€XCHflNG€ 



What s the BUZZ? 



REAL TIME QUOTES!!! 
TELCO ORDERING ON-LINE!!! 



Telco Exchange Pricing 




TELCO EXCHANGE 

Trorr-*d»efi-n , q*T*c'g"n-t'e-r ^ 



0 



heck availability. 



nationwide 



{Sfrompare prices . 

multiple tariffs 



{#jrder digital service ... 

fast and secure 

the web. 



24x7 



info@telcoexchange.com 



T€LCO€XCHfiNG€ ,4 



877.988.6484 



ti-ta 

dsl 

i s d n 

frame 
relay 

internet 
services 

network 
solutions 



www.telcoexchange.com 
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^Go 



TimePlex Group 



to the 



Toll Free 

(800) 658-5200 

■www.connectraniK.cam 



• Fast Ethernet PCI Fiber Adapter with 
SC or VF-45 interconnect 

• 100BaseFX 1300nm Multi-mode Fiber 

• Full/Half Duplex operation 

• LED's for network diagnostics 

• Extensive LAN Driver Set for NetWare. NT. 
Banyan, Linux. SCO and more 

• Patch cables allow connection to ST 

• Lifetime Limited Warranty 

'All orders must be placed by June 1,i99S 




COWLTTRONIX- 




For the lowest price on 
TimePlex Equipment 



All hardware is staged 
and pre-tested. 
If it doesn't say 



Engineering Support 
Software/Prom Upgrades 
Year 2000 Upgradable 



then it's not! 



ALL TIMEPLEX EQUIPMENT 

FDDI CSU TIME/LAN 

UNK/2+ microUNK TIME/PATH 

UNK/1 miniUNK MICRO PLEXER 

LINK/100 ROUTERS OEM 



. netwo rk world .coin/irrf ox press 



L 



1-800-726-LINK ext. 1777 



or Fax: 1-727-531-2102 
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At last, the data network enclosure 
solution for virtually everyone. 





Hewlett-Packard 



Fujitsu 



Compaq 



AMCO Engineering's new data cabinets provide a cost-effective 
enclosure solution for today's proliferating networks. *l* Our 19" 
server cabinets meet or exceed multi-vendor third-party rack 
requirements, providing flexible storage for network components. 

Our 48" LAN cabinets allow for efficient vertical organization in a 
spacious central location, minimizing your network footprint for 
optimum use of space. *i* Both enclosures come in a wide array of 
heights, depths, and colors — and are designed for maximum air- 
flow, easy accessibility, and simple maintenance. Available with a 
full line of accessories. For further information, call us toll free at 
1-800-833-3156 or visit our website at www.amcoengineering.com 



nmco 



® 



nctv.orkrtorid.com/infoxpress 



Keyboards 




Copyi 



Unconventional 
Wisdom 



Conclave re-wrote the book on Internet security. 

Tired of maintaining a DMZ for your public Web servers? 
Sick of managing modem pools for your remote access 
employees? Want the savings of using the Internet for your 
site to site connectivity, but not the cost of administering 
VPN routers? Gel Conclave 

Conclave offers firewall, secure remote access. VPN 
certificate authority, virus scanning and role based policy 
management in a single, integrated product. 

Try Conclave For Free 



an 

Internet security 
software by 
its cover. 



Call 1 87 7 / CON CUV < ?66 25?8 (or visit our website at 
www conclave com. Booth NP3270 Networld • Interop Show 
Las Vegas, May 11 13. 1999 



® 




©1999 Internet Dynamics 

#326 @ www.networfcwortd.com/lnfoxpressl 



:^ave 

Intranet/Extranet 
Accessware 



A product of Internet Dynamics 




Edi max CPU Switch Plus 




On Screen 
Display! 



Control multiple PCs 

from a single 

Keyboard, Mouse, 
Monitor, Speakers, 
and Microphone! 



CPU SWITCH PLUS 



CURSOR UP 
▼ CURSOR DN 
i PREV. BANK 
► NEXT BANK 
INSRENAME 
ENTER:SW1TCH 
ESC. EXIT 0S0 
F1:T1ME EDIT 
F2:SCAN MODE 
O :P0WER ON 



SCAN INTERVAL 

SSEC 10SEC 20SEC 40SEC 



Questionable. 



It all comes down to questions. Questions 
that challenge your expertise about Microsoft 
products. Question yourself - arc you ready? 
Be absolutely sure. With Spike and the gang's 
certification guarantee, you will be. Because 
once you've completed the program, you'll pass 
with flying colors or get your money back.* 
And don't worry, because as Microsoft 
Certification changes, Transcender will 
have you covered. ..without question. 



Guaranteed. 



• Most Realistic MCSE and MCSD 

Simulations Available 

• Detailed Answers and Explanations 

• NEW! Computer Adaptive Testing Features 

• NEW! Simulation Questions 

• Money Back If You Don't Pass Guarantee" 

• From 1129 - $179 



Transcender. America's #1 Exam Preparation Software. 



Transcender 

Corporation 



To order, call Howard ® (615) 726-8779 or fax (615) 726-8884; 242 Louise Ave.; Nashville,TN 37203. 

C 1499 TrCTtcrrdrr Corp All Dnmird UkmoR n a -~i ■■>-•■ ■-..»-■.;. at 

Microsoft Conors! on Uulli uwr liorran at juataeie *Cill or vet our Itafe trie for aeuih. 



www.transcender.com 




CPU Switch Plus 



EFI I MAX 

ISO-9001 Company 



• Multimedia Support 



High Video Resolution 



Control up to 128 PCs 



l -800-652-6776 
www.edimax.com 
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MANAGE 1,000 SERVER 

from 4 or more KVM stations 




CABLES CONNECT ULTRAMATRIX 
FROM 1 TO 1,000 COMPUTERS! 




Rose has done it again! The UltraMatrix is a 
keyboard-video-mouse (KVM) switch that has 
all the features, is the simplest to use, and 
costs the least. 

Call 800-333-9343 for your catalog 




Simultaneous access from 4 or more KVM stations 
Supports multiple platforms: PC, Sun, Unix, others 
Full keyboard and mouse emulation for automatic 
booting 

Expands easily with plug-in cards 
Sleek on-screen display simplifies user interface 
Innovative cabling system makes installation 
clean and easy 

Uses less rack space than other switches 
Security, access groups, user profiles, status 
screen, flash memory, and more 




Rose has been providing innovative solutions since 1984. 
We have a complete line of KVM switches for server 
rooms, classrooms, desktops, and other uses. Ask us 
about our KVM extenders using coax or twisted 
pair. We also have an extensive line of serial and 
parallel data switches. Call us today to discuss your 
application. 



GROW WITH 
ROSE PRODUCTS 



% 

T-X ELECTRONICS 



WWW.ROSEL.COM 





Aerospace/Military 



USA Office: 



Computer Room 



plant control 



Trading Room 



Control Consoles Class Room/Corporatf 



10707 Stancliff Road Houston. Texas 77099 Phone 281-933-7673 Fax 281-933-0044 
UK Office: Phone +44 (0) 1264 850574 FAX +44 (0) 1264 850529 



■.-H.l-LHWJ 
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Upgrade your 
Network Timing 





Datum Network Time Servers 




Introducing the Router that's easier to configure. 



Web 
Browser 
Coiifitairalion. • 
It's Easier! 



Introducing The Emerald, a 
Frame Relay Access Router to 
replace all others. Why? Web 
Browser Configuration! Use 
Netscape 4.5 or MS IE 4.0 to 
set up and configure your 
Emerald. The Emerald allows 
you to monitor your network 
from your desktop using the 
Web Browser you use every 
day. For less than the price of 
one week s training on those 
other routers, you can be up 
and running in minutes! 



Call 800-223-9758 to receive a FREE demo Emerald to try 
for 45 days. If you're not convinced it's the easiest router 
you've used, send it back. What could be easier? 




lake a look. 



I'll lik.- wlta 



t vi hi 



Ame 



rican 



ftmirto i n TtocJ Magy BOO 777-6611 



TECHNOLOGY 

www.atli.com 



THE 




The Simple, Powerful & Affordable 

Firewall 



• Proven Firewall Technology 

• Network Address Translation 

• Unlimited User License 

• High Performance 

• Transparent Network Access 

• Easy to Configure & Operate 

• Remote Web Based Management 

• Cost Effective 

• Time Based Access Control 

• URL & Content Filtering 

• Email, Pager & SNMP Trap Alerts 

• Email Proxy 

• ISDN, xDSL & Cable Modem Support 

• Win9&NT Management Client 



$ 995.00 



1-800-775-4GTA 

Web: http://www.gnatbox.com 
Email: gb-sales@gta.com 
Tel: +1-407-380-0220 Fax: +1-407-380-6080 



*. network world.conVirtf o> press 



SNMPc Enterprise 
Manager 

Distributed management 
for Windows NT. Supports 
remote eonsoles and 
polling agents, Web Trend 
Reporting and more. 



SNMPc WorkGroup 
Manager 

Affordable management 
for small networks. 
With an installed base 
of over 60,000 copies, 
this popular tool is resold 
by major OEMs, including 
Cisco and ACC. 



Network 
Management 

for Microsoft Windows 





Castle Rack 

Computing 
Phone: 408.366.6540 
Fax: 408.252.2379 



Download a Free Evaluation 

www.castlerock.com 
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Monitor 



With 

WANwatcher' 
for Frame Relay 
Statistical 
Trend Analysis 



^^^P^S^I 3 OOO Whether you're a carrier deploying 

Routes and monitors managed services or an 

Frame Relay traffic enterprise user looking to verify 
from One deVlCC vour Service Level Agreements, the 
Eastern Research RPM 3000 Router/Performance Monitor 
can make you a winner. 

Optimized for frame relay services, the RPM combines the 
functionality of a remote access Router and a Performance 
Monitoring CSU/DSU. Its unsurpassed routing features, 
coupled to extensive network statistics, start you in the pole 
position; then allow you to set and track the pace. 

With the RPM, there's only one device to install, configure 
and spare. Its modular design adapts to ever-changing 
network conditions, protecting your initial investment, and 
its intuitive menu-driven user interface enables rapid setup 
and easy diagnostics. 

When you're delivering or utilizing Frame Relay services, 
second place isn't an option. Call 800-337-4374 now 
and discover why Eastern's RPM 3000 
leads the pack. 




See us at 
Booth 1773 




225 Executive Drive, Moorestown. NJ 08057 1-800-337-4374 609-273-6622 E-mail: info@erinc.com http://www.erinc.com 



Products as Solutions 
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AT HOME, 
HOW YOU 
SURF IS 
YOUR 
BUSINESS, 
i 



AT WORK 
IT S OURS. 

Immediately 

increase 

productivity. 

Monitor, report on, or 
block all Internet access. 



LittleBrother 

Little Brother is watching you use the Internet" 



546 Valley Way Milpitas, CA 95035 
Ph: 1.800.200.9881 Fax: 408.263.9883 sales@kansmen.i 
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Reboot and Access Remote • — <\, 
Equipment With ONE PRODUCT 

FEATURES 



J 



Power Control, reboot or turn on/off remote equipment 

RS- 232 Console/Aux port access to remote equipment 

Dial-up access with internal 33.6 kbps modem 

Telnet access with internal network interface 

Local console for onsite access to connected equipment 



DS4D-RPC 
(Rear View) 



ELIMINATE COSTLY 
REMOTE NETWORK 
SERVICE CALLS *m 

BayTech's complete line of remote 
site management products. 

These products will help keep 
your network running. 



■ m m . . 

■■■■ ■■■■ 

Control/Aux Port Power Control 
Access 



j 



Router 




n§ dsu 

Hub 
I Server 



Also available, seperate power control and console access solutions 

800-523-2702 www.baytechdcd.com 
International: 228-467-3231 Fax: 228-467-4551 



A KVM switch is only as smart 
as the brains behind it. 



Demand Raritan. 



Now Available: . 
MaslerConsole MX 
Multi-User 
Matrix Switch 



• Connect and operate 
any combination 
of computers 
(PC, Mac, Sun, 
Alpha, HP9000. 
RS/6000, SGI) 
without having 
to change cards 
or dip switches. 



• Intelligent on-screen user interface 
simplifies switching, operation, and 
administration. Premium video 
components and double-shielded 
coaxial cables deliver hi-res video. 




• t ; nique Raritan 
emulation technology 
dedicates a "brain" to 
each channel to deliver 
automatic hooting and 
/lawless operation, 
and to prevent 
keyboard and 
mouse lockup. 



• Easy to install, easy to use. Start 
with 2, 4, 8, or 16 computers. 
Expand to control up to 2S6. 
Operate from central, remote, 
or multiple locations. 




Call toll free 1-800-724-8090, X83, 
or visit us online at www.raritan.com 



Request this 
FREE guide 
to learn critical 
factors about 
KVM switch 
performance. 



Raritan 



E-mail: sales@raritan.com Phone: 732-764-8886 Fax: 732-764-8887 
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CSE TRAINING 



For a limited time, when two 
people register for the MCSE 
program - the second gets in 



Includes hands-on training for ALL 6 modules. Microsoft approved study guides, 
MCSEQuest testing software (with hundreds of practice questions). MS Windows NT 
Technical Support Training and demo version of NT 4 0. Offer valid for day session only. 
Both candidates must register together, Second person pays for books, software and registration 
only. Call or visit Microhard website for comptete terms & conditions 



Microsoft" 




| Solution 


Provider 



Other certifications: MCP, MCSD, 
CISCO, ORACLE, CNE, CNA, A + 



GO WITH THE BEST. FIND WHY COMPANIES LIKE AT&T, ARTHUR ANDERSON. 
MOTOROLA, US ROBOTICS AND THE US DEPT. OF DEFENSE CHOOSE OUR TRAINING 



MICROHARD TECHNOLOGIES, INC 



CHICAGO DALLAS OAK BROOK ORLANDO ST LOUIS SCHAUMBURG TH0RNHILL TORONTO BANGALORE 

1-877-microhard www.microhard.com 
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When your old network monitoring 

tools don't fit anymore... 




You've moved from o traditional SNA environment to TCP/IP. And you've 
outgrown your old tools. Bad news. Now that you're on a public network, 
you'll need to control your environment more ttion ever. 

Are there TCP/IP tools? Of course, but only one solution, e-Control, 
offers you network monitoring, performance management, ond problem 
diagnosis. That's o critical advantage for maximum control. Say a 
component fails or you have a security violation. With other solutions, 
you'll only know that a problem exists. With e-Control, you'll get the 
"what, where and how" of the problem, along with proactive alerts to 
help you avoid career-threatening technical disasters. You can also decide 
which events to highlight and who to notify in case of trouble, for foster, 
more efficient response. 

e-Control is the perfect fit to keep your OS/390 servers and business 
running at top speed. 

For a free demonstration CD or to order a product evaluation: 
visit us at www.interiink.com/oKer, 
eMail us ot offer@interlink.com, or 
coll us at 800.366.5452 



...it's time to take 
e-Control of your TCP/IP 
data center. 



IflTERLiriK 



COMPUTER SCIENCES' 



©1999 Interiink Computet Sciences, Int. AH rights reserved. Hie Interlink Computer Sciences logo design is a trademark of Interlink Computer Sciences, Inc. 
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INTRODUCING 
LAN/WAN 
TRDUBLESHODTING 
AMD PROTOCOL 
ANALYSIS SOFTWARE 

SO OBSERVANT, 
IT CAN SEE ALL PORTS 
OIM YOUR SWITCH. 



OBSERVER 



Observer identifies network trouble spots, and costs 
thousands less than expensive hardware-based 
analyzers. If you have network slowdowns would you 
know if they are being caused by packet errors, 
broadcast storms or overloaded utilization? Find out 
with Observer or Distributed Observer 



•Switched mode sees all ports on a switch 
gathering statistics from (he entire switch or 
packet capture from any port or portsFlnally a 
protocol analyzer that can be used in 
switched environments! 
• Long-term network trending collects statistical 
baseline data for days, weeks, months or years 
for review and reporting. 
•Distnbuted version available for $1290 (includes 
1 local and 1 remote Probe). Additional Probes 
are $295 per local or remote segment or switch. 

•Network Instruments' optimized ErrorTrack™ 
NDIS drivers display true errors-by-station. 

Includes collision expert. 

• Track router utilization/traffic in real 

•Ethernet (10/100/1000), Token Ring, f 





NOW WITH 100%JAVA BASED CROSS 
PLATFORM BROWSER MANAGEMENT 
SOLUTIONS USING E-MANA GER/NetPrism 

• MANAGE YOUR UPS 

• CONTROL AC/DC POWER 

• GATHER ANY ALARM 

• SERIAL PORT ACCESS 
m MANAGE ANY HARDWARE 



• EXCLUSIVE VISIBLE LIGHT 
LINK AND MUCH MORE 

Come see us at N+I Vegas Booth *8509 

1-800-247-1431 www.e-comms.com 

E-COMMANDER, E-MANAGER & NetPrism are trademarks of E COMMS & Fujitsu 




It's an Open and Shut Case... 






ADVANTAGE 2000 

|p L U 5 



Tl 1 1 rT J Great LakesfT 

n ase & cabinet co.. Inc. * 



rw.qreatcabii 



814.734.7303 • Fax: 814.734.3907* Email: glcc@greatcabinels.com 
See us at Networid+lnterop Booth #3501 
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Why gamble on 
your WAN interface? 






www.sdlcomm.com 



Partner with the global leader in OEM 
PCI, CPCI and PMC WAN adapters to 
reduce your time to market and fully 

optimize scarce engineering resources. 



SDL Communications, Inc. 

The uplink company 



EASTMAN STREET. SOUTH EAST ON, MA USA 02375 PHONE. [508| 23FJ-4W0 FAX |508| 238-1053 
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Network managers - take control! 



APC MasterSwitch™: the right answer for 
remote reboot requirements 

Imagine having the ability to power-on and power-off sensitive 
communications and computer equipment instantly in a remote 
office 800 miles away without raising an eyebrow. With APC's 
MasterSwitch ", you have no reason to panic, and no need to 
dispatch costly service people. You control power to remote 
equipment from your desktop or laptop via Web, SNMP, Telnet 
or modem connection. 

Today, power management translates directly into high avail- 
ability. For network operations, the ability to remotely reboot 
locked equipment and bring each device back on-line quickly 
represents a big boost in productivity. 

The APC MasterSwitch saves corporations thousands 
of dollars a year by eliminating unnecessary field 
service technician calls. Test drive MasterSwitch and 
see what APC's Legendary Reliability * is all about. 
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MasterSwitch benefits include: 

• Eight independently controlled 
switchable outlets for remote 
rebooting of equipment 

• Requires only 1U of rackmountable 
space 



Visit APC's Web site today to receive your FREE 
APC Network Enhancement Solutions Kit and 
test drive MasterSwitch on-line before buying 1 

KEY CODE 

http://promo.apcc.com kii4z 

CALL |888) 289-APCC «7579 • FAX: (401) 788-2797 



• Provides in and out-of-band connectivity 
to manage devices (Web. SNMP, Telnet 
or modem) 

• Tremendous savings on costly field 
technician service calls 



Legendary Reliability" 



©1999 Amercen Power Conversion- AJl Trademarks are trie property of their owners MS2A9EP-US • PowerFax I800) 347-FAXX • E-mail: apcinfo#apcc-com • I32 Fairgrounds Road. West Kingston. HI 02892 
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Remote Reboot Over Telnet! 



Reboot your Network Equipment via Telnet, Dial-Up and Local Console 



Network equipment sometimes "locks-up" requiring a 
service call just to flip the power switch to perform a 
simple reboot. The NPS Network Power Switch gives 
network administrcrtors the ability to perform this 
function from anywhere on the LAN/ WAN, or if the 
network is down, to simply dial-in from a standard 
external modem for out-of-band power control. 

✓ TCP/IP Security 

✓ Individual Plug Passwords 

✓ Dual 15 Amp Power Inputs 

✓ Eight (8) Individual Outlets 

✓ Modem and Console Ports 

✓ Co-Location Features 

✓ 115-VAC and 230- VAC Models 

✓ Modem and Telnet Auto Reset 



Individually 
Programmable 
Outlet Plugs (8) 



10Base-T Ethernet 

Interface 



1 9" Rack Brackets 
Allow Front. Back, or 
Center Mounting 




Dual 15 Amp 
Power Circuits 



Modem Port for 
Out-of-Band 
Management 



□ western" 

D telematic inc. 



Local RS232 
Console Port 



(800) 854-7226 • www.wti.com 



5 Sterling • Irvine • California 92618-2517 • (949) 586-9950 • Fax: (949) 583-9514 
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Everyone is Pointing T 
Finger At Us.. .Because 
Of Our Solutions Are 
Available At 
www.lastar.net 

Lastar is proud lo announce the launch 
of our secure online ordering system 
and search engine. Now finding and 
purchasing all the connectivity and net- 
work components you need is just a 
mouse click away! From patch cords 
and printer cables to switches and 
tools, Lastar has your solution in stock! 

Give it A Try! 

Now through June 30th, get quality KTI 
auto-sensing 10/100 PCI NICs for as 
low as $17.99* (ref.# 19756) when you 
place the order on our website. These 
cards offer a five year manufacturer's 
warranty PLUS you'll receive FREE 
SHIPPING on the cards. 

* When purchased in 5 packs; Individual cards are 
only S1 9-99 (rel.# 17581) 

Convenience and value - 
it's the Lastar way! 




■7, 



BBa , 



^^^^^ 



Cap*** 
ac tinic , 

FLUKE. 



Ta stcm^ 



800-291-6031 • www.lastar.net 



1501 Webster SI. 
Daylon, OH 45404 
Fax 937-223-6385 
8:30am to 6pm M-F 



■■J VISA 

Most Orders Ship Same Day Via UPS 
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Telecom Management 



Open 



24 hours a day 



Attend Class Anytime Earn your MS Degree Online 

• One of the only schools in the country to offer 
aTM degree completely online 

• Gain the advantage you need to compete in today's 
hot telecom market 

• Specialize in Telecommunications Business Management. 
Networking Technology or Communications Technology 

• Learn leading-edge skills from instructors who work 
in the field 

• Study internetworking, wireless, digital technology and 
enterprise network design 

Contact us today to find out more 



The 



KVM.Switches@Cost 
Introducing the KVM Systems Store 

Purchase any compatible 
Keyboard/Video and Mouse 
Switch "At Our Cost" when you 
purchase The KVM Cable in 
quantities equal to the number 
of switched ports. 

Make your purchase on our 
secured web server, and we'll 
even give you a break on the 
price of the cables 

Up to 25% off 
The KVM Cable 

http://www.kvmsystems.com 
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Network Ready 
CD-ROM Servers 

From $1,749 

Excel custom designs 
powerful, expandable 
CD-ROM Solutions for 
Netware. Windows NT and 
Unix Systems ranging from 
7 to 256 CD-ROM Drives. 




CD-ROM Systems 

888-286-6201 

www excelcdrom.com 
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A/C & D/C Power Control 
via Phone, Serial or 
Network Access. 



Anything ! 



3> 




1 -800-436-3284 / www.dataprobe.com 



Extendi 5jj 
Your Reach 
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Golden Gate University 



I.888.874.CYBER 



http://cybercampus.ggu.edu 
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Rockit Your Career with 



our jglEE^elj 





/ 



Call Now to Get Your First Course at No 
Charge! (Limited Time Offer) 

Discover the fast and easy way to boost your I.T. knowledge and prepare for 
I.T certification. Our computer-based training courses provide a learning 
environment that surpasses tradirional classroom and video courses. See for 
yourself how ForeFront Direct can give you the skills you need to launch or 
accelerate your I. T. career. Call today for your FREE I.T. training course! 

Open the Door to Great Career 
Opportunities 
Raise Your Income 
Gain Valuable Skills, 
Knowledge and Technical 
Recognition 
Study at Your Own Pace 
Interactive Hands-on Exercises 
Online and Telephone 
Mentoring Available 
One-on-One Training 
Consulting 



877-872-4646 



(800)475-5831 • (727)724-8994 • Fax: (727)726-6922 • www.techcourses.com 



Self-Study Courses: 


•MCSE 


•MCSD 


• MCSE+Internet 


• Visual Basic 


•MCP 


•Visual C++ 


•CNE 


• lava 


• Novell CIP 


• C++ 


• CNA 


•Cisco 


• Oracle 


•UNIX 


• Uitus 


• Networking 


• Webmaster 


• Office 97 


• PC Repair 


• Windows 98 


• A+ Certification 


• And More! 



Try it today at 



www.networkworld.com/infoxpress 



NGtWOrkWorld InfoXpress is reader service at its best. An online service designed to furnish readers 
with a quick and easy way to request information, NstWDrkWorld InfoXpress offers readers: 

• Easier access to more relevant information. 

• The ability to search for information by reader 
service number, advertiser name or product 
category. 
•24-hour service. 

• Flexibility in requesting information via mail, 
email, telephone, fax or linking to the advertiser 
web page. 

Free Product Information 



.-: World 

E3 LEADER 
IN NETWORK 
KNOWLEDGE 

Print -Otliit -htili 



Netscape: InfoHpress - Network World 
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^ Bay Networks CaBLeTFOH 



The Merged Company of SynOptics and WeHfleet 



We Stock the Largest Inventory of 
Refurbished Bay Networks in the World! 




• Bay Networks ESP Trained 

• Bay Networks Authorized 

• Full Product Line 

• New & Used, Buy & Sell 



• Proven Track Record 

• Good As New Warranties 

• Repair Services Available 

• Technical Support 



Phone 801 -377-0074 
Fax 801 -377-0078 
1 403 W. 820 N. Provo, UT 84601 



Visit us On the Web @ v 



/.nle 



National LAN Exchange 
888.89 1.4BAY (4229) 



C.O.D's ferms 
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Major Savings on 
Network Equipment 



E0UIPMNT T0U 


MULTI-LINK SUPPORTS YOUR 




UN/WAN NEEDS WITH: 


IKIMIU 


VALUE 


Up lo 90% savings on quolity, 


an 




refurbished products for all 






opplkntions 


Gwe/SliMCaffl 






DigilolLal 


PERFORMANCE 


large m-stoclt inventory oJlowing for 


GDC 




same-day worldwide snipping 


lorecom 








RELIABILITY 


Thoroughly tested equipment. 


Nil 




backed by extensive warranty 


Ncrtvl M^hvoHts 


MULTI-LINK CAN PURCHASE YOUR 


pMtxtynE 


OBSOLETE INVENTORIES: 



3Com /US Robolia 
MM 



Highest prices paid v Trade-ins r Upgrades 

1-800 TO MULTt {sm-umi 

No 310 320 1551 

[•MAIL: sol., ' ml, p., _ "J/£,7Yi«yjff 
hftp:/ / www.mlcp.taMi • - - . - - > 

361 Van Hks Way #302- Iwrorm, CA 90501 



#336 @ www.networitworid.com/infoxpress 



Purveyors of Networking Hardware 



NEW 
8c 

USED 



SMC flabotics «»chipcom 



BUY 

& 
SELL 

Sentry. |H V 

IbM'.m Diwount! 
milittt 



LOWER PRICES THAN THOSE WAREHOUSE GUYS t 



Lowest Prices on Factory 

Fresh Equipment 

Up to 90% OFF Retail 

for Refurbished Items , 
' Huge Inventory of 

Legacy Products 
■ Factory Trained 

Consultants on Staff 
Fax us Your Want to Sell / Buy Lists @ 5 1 6-293-5325 



Authorized _Jy*tv 
Service Center"fc 
- We Also Do Repairs 
& Exchanges 
Same Day Shipping 
on Most Items 
Same Day Delivery 
Via Counter Service 



L&fVCUI" s^LXAs LLLXll CU-LUU£ iilC^ili: 

A Division of Ergonomic Enterprises. Inc. 

CALL U! LL tllliL; X^'ll <LL\IV<lL 

International Calls: 001 - 1 -S 1 6- 293-5200 I E mail: Sates«v4LANWAN.COM 



WWW.4LANWAN.COM, Inc. 

A Division of ErgonomK Enlorprliai, Inc. 
logos m« registered trademarks of the companies they represent 
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nsgdata.com, inc. 

specialists in 

Year 2000 
telex and X.25 
solutions worldwide 



1.800.270.2669 301.662.5901 
www.nsgdala.com 
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For More 
Information 

About 
Marketplace 

1-800-622-1108 




Rack Mount 
Servers 

jtatSM hidiuk: 



room 0 p i ■ m 

Supp#as And Fans 

^System Monftomg/ 

Alarm And Management 

Features 

^ Intel N440BX System Board w: 
Dual P4I Support, 100MHz 
System Bus 

. intelligent ^OCactyngRAJDCortro/^r 

* RAJD Subsystems Featuring Seagate SCSI 

Drives vVMh Up To 145GB ■ RAID 5 Per Subsystem 

- LAMDes* Server Manager v2.6, Windows NT Server 4 0 Installed 

800480-4384 or 612-884-6002 rackm isek***. /„.. 

■■■■■■■■■ ; ■ '■ f ::em 



ateSCSl "^VftTfl 

1 t Par <Zi ir^n^vAArTT^^^Nillllllllllle^^ # 
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ROUTERS • HUBS • DSU/CSU 
SWITCHES • TERMINAL SERVERS 

BUY/SELL/LEASE 




ASCEND ■ LIVINGSTON 
ADTRAN ■ KENTROX 

Overnight DefiVerv; fully Guaranteed 

800-230-6B38 

3S«05 «M I3I4 fai:J05-964 S 6495 - 

/ww.networkhardware.com 

Mciwobk Hardware Resale, Inc. 



? www.nehrorhvKH-ld.conVinfoxpress 




That's precisely 
And we got H 

te<Hnology. Now our network 
gives us the best 

of both worlds." 



is a remarkable 
digital compression tectinology 
that odtfs foll-auaJity voice and fax to your 
existing frame relay or routed IP network. Intra- 
company phone calls and faxes ride free along with other LAN 
and WAN traffic. What's more, ClearVoice lakes only a fraction of your 
network's throughput, so there's no need to odd extra borKhvidtn. Col or e-mail 
today to receive Norte/ Networks' free Clear Voice white paper and get the ful story. 

Free Clear Voice Over Frame Relay White Paper Offer 1 . 



DiS C 



1020 Colle Cordillera, Suite 103, San Clemente, CA 92673 Tel: IS00I 388 8953 
E Mail: sales*? dscwan.com Website: www.dscwOT.com/Reg/SpeciolsMojn.htBi 



Bringing 



i to Windows Desktops 



f 2S 



ws 95/98/NT 

stArnet 



Visit us at www.starnet.com 



Download Free Demo from: 

Hp J/TTp.starn4»t.cc4TVtl«s/rrib02/x-w(rv41 1 eom 
LBX Support 
Access Security 
Multiple Monitors $ 1 75. 
Mouse Wheel Support 
Cut/Paste to WmcJows Apps 
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M0VEU NW-S.O Upp*a« 

luinma jKkteM-lx tw 
.SUmnm UttoM-U MH 
ViUmotrt UJfkwlJt tit* 
100 CaMcd s&hr* be 12 WS 
»f ll.MI 1 \KH\ II II 
\ TKMIINS ill M IMMM 

VMCM PVM 

K\U HWM.KVISI 
QUI FOR I'KK W>. 



M Vntt i (itrntv 
NTSrrvrr lOQrnb 
M >cr«r ID Lcctd*- 
\T ttoriMalk* 
VT »iirliLiu«n U 
ItnfflK'Smtvu lltuxi 

IVuflki Snillu K Mrti 

MX&t.Vtw luiktl 
U "tin r ur J) Pik 



lull ■ I K-HII 7 IKK 

I M.ill S)l« BHIOIIO iorn C 
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REFURBISHED NETWORKING EQUIPMENT 



The First Name in Second Source 
Networking Equipment 

BUY, SELL, 
LEASE/RENT, TRADE 

Routers, Hubs, Switches, Comm. Servers 



BAY NETWORKS, 3COM, 
ASCEND, LIVINGSTON, XVPLEX 

lechmcal Support • Product wwranty * AognsNve Pnong 

1 -800-832-6539 

FAX: 612-944-3534 
VOICE: 612-944-3440 
Email: sales@interlinkcom.com 
http://www.tnterlinkcom.com 



1 COMMUNICATIONS 



«. network wori d . c om/i nf ox press 
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For Free Product Info • www.networkworld.com/infoxpress 



www.ne«wod<woftdxom/in<<»(pf ess ) Marketplace 



I'vi Liue iHuiiiidliuut 



Livingston US Robotics 

Ascend B* Y /V*. ""com 

<? Specialist in nil ^ 
Cisco product* 10 
W* including Memory £ 

o y 

- LAN WAN Products _ 

D> ■ P 

q New, UmtU, Lease, 

SCom^ ^ Codex 

Adtran * 'NO«* v Xy logics 
Motorola Welllleet 

Wm carry all Manufacturers 



Millennium Solutions Group, Inc. 



•Routers, Bridges •Frame Relay 
■DSU/CSU's -Hubs, Modems 

•Switches, ATM *Volce over Data 



We Buy and Sell 
KHK-80 1-2001 Fax (916) 610-2000 

Visit our Web Site at: 
http: www.millenniumsoiutions.net 
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MODEMS 
DSU/CSUS 
T-l EQUIPMENT 
SWITCHES, MUXES 
HUB, BRIDGES, ROUTERS, ETC. 




Cabletron Bay Networks 



Cisco Specialists 



3Com Micom Adtran H/P 



http://VAVw.adcs-inc.com 
PHONE 
800-783-8979 




FAX (916| 
6962 



For details on how 
to put: your ad here 



Q 



7w 



Enku Gubaie 
1-8D0-6aa-110B 



Mat* In USA 



Solve 
Ethernet 
Distance 



Limitations with Fiber! sooi 694-9694 



(CONVERT: COPPER ^ FIBER) 



DESCRIPTIONS: 
1 DBASE T - 10BASE-FL Converter' 
AUI - 10BASE-FL Fiber Optic Transceiver 
AUI - 10BASE-T Transceiver 
100BASE-TX - 100BASE-FX Converter' 
SM MM Converters A Repealers Available* 
'20 Unit Rack Mount Available 



Switches, Fiber S CAT 5 Products 



www.fiberdyne.com 



/Ifiberdyne LABS, INC I 

127 InMsi Pirt Dr.. FrjnHotl NY 1 334G | 
lei 1315)895-8470 Fai (3151 895-8436 



-mm 



Cabletron Equipment 

GUARANTEED 



100% factory refurbished 
. , Only factory-authorized VAR 

iJrt,0® " • 30 day hot swap, 1 year free repair 
• We also carry: Bay Networks, 
' 3Com, Compex, Cisco & more! 

ht = t:eri-*gTETTn 



eommutucMiiaMM. % 



Vnetek Communications, LLC 
sales@vnetek.com • www.vnetek.com 

Brand names are registered trademarks 
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$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

Wanted to Buy 
Networking Products and Services 

Over 164 000 qualified subscribers of 
Network World are ready to buy. 

Call today to place your ad 

in the Marketplace! 
1-800-622-1108 ext. 7507 

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 



WtBSiS^ 1 

NETVVQR ICI NCS 



Rowt-srs — Switches m Hub>& 



CO, 3AYNETW0RK5, CABLETRON 



Visit Our WEB5ITE@www.blzlnt.com 

NY Office/Sales: ./""""V Office: 



Tel: (315) 458-9606 
Fax: (315) 458-9493 



Tel: (978) 667-4926 
Fax: (978) 663-0607 
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^®™*Category 5 




Premium Patch Cords 

Our Patch Cords exceed the EIA/T1A 
568a specification. 

• Contacts: SOm gold pl.it in 

• Wire: 24 Awg. stranded, Category 5 
" si, <> wire is very flexible 

• Molded strain reliefs availablc 

• Available in Black. Ivory, White. Ked, 
Grce, Blue. Yellow. Gray. Hot Pink. 
Orange & Purple 



3ft . 
6ft . 
10ft. 
15ft . 
25 ft . 



In Lots of 5 
11 Colon Available 



.1.45 
.1.90 
.2.50 
.3.25 
.4.75 



Bulk Wire 

CAT 5 pvc AS LOW AS 565.00 
CAT 5 plenum AS LOW AS SI 90.00 
19" Data Rack S1 26.00 

CAT 5 Patch Panels 

12 PORT Mini S55 

24 POFfT SB5 

48 POFfT $170 

96 PORT S330 

AM Patch Panels are VL & ElAtTlA Verified 

Outlets 

CAT 5 Inserts 3.20 ea 

Faceplate 1.00 ea 

Fiber Optic Cords 

5T-ST Duplex 62.5/1 25 S23.00 



EIectro Products. Call 1-800-423-0646 

Or fax your request to (253) 859-9101 




I Certified NetAnalyst 

ISM} (hS-8486 

I'IM-MOl NTAIMiKOI I'COM 
PMtMol & .\nalyzer Traininn 
nifTrr. Kluki'. III'. Shomiti 



Certizone 

©13) 981-^8 
wsuv.artizone.com 
I MCSE Customized Training Pgnis 
Nc'hwirk MgnU A-t- HtMWfct 




Contact these companies today to help you with your training needs! 
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Buy, Sell or Announce 



Network Products and Services with 
Network World s Marketplace 
Call 800-622-1108 ext. 7507 



•VHP CISCO DIRECT 

^l-888-89 CISC0 * 




- — s Save up to 80% on new/used: CiteiSiittiii 
NET AST - Routers - Switches - XDSL - Tl CSU/DSUs 

-ATM - Fast Ethernet - ISDN - FromeReloy WC BUY USCD 



CISCO 

- Ascend 

^^♦♦4 www.dioltalwarehouse.coin 
**♦ r " 



Lucent/Livingston - Nortel/Bay Nerwoiks 
3COM/USRobotics - lorscom - Cabletron 

- Paradyne 

- Motorola 



- ADC Kenltox - Xyplex 

- Newbridge - Adtran 

- Digital Unit - Fore 

- Nerwoik Assoc. - IBM 



Nelfast Communications Inc., 56-29 56* Drive, Maspelh, NY 1 1 378 USA 
Phone: 1-888-892-4726 or 718-894-7500 Fax:718-894-1573 
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Tom Garvey, Mailioom Supervisor 
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Donna Pompom, Senior District Manager 

Kevin Gasper, District Manager 
Internet dpomponi, kgaspenSnww com 
Linda Bishop. Sales Assistant 
15081 875 640VFAX: {508) B79-5760 

MID-ATLANTIC \\^m\\M 

Jacqui OiBianca, Semor District Manager 
James Kalbach. Account Executive 
Internet: jdibian. jkalbachSSnww com 
Rebecca Showers, Sales Assistant 
I6t0)971-1530/FAX (6101975-0837 

MIDWEST/MARYLAND 

Eric Danetz. Distnct Manager 
Airwe Jacobs, Seles Assistant 
(201|587-OO9ljVFAX: 1201)712-9 

CENTRAL 

Dan Gentile, Midwest Regional Manager 
Internet; dgentile@nww com 
Kristin Ashton. Sales Assistant 
(5121 249-2200/FAX; 1512) 249-2202 

mmmmH NORTHWEST 

Sandra Kupiec. Advemsing Director/Western Region 
Carol Stiglic. Senior District Manager 
Susan Rastellini, Sr. Disiria Manager 
Karen Weiss. Sr District Manager 
Lara GreenbeiQ. District Manager 
internet skgpiec. cstiglic. sir. kweiss. 
Ig reenrj«,ki7iarceair3nww.com 
Katharine Marceau, Sales Operations Manager 
Javiera Garcia, Sales Assistant 

Mark Hiatt, Sales Assistant 
14081567 -tlKI/FAX (4091567-4156 

■■■■■ SOUTHWEST 

Amy C Bartulis. Senior District Manager 
Internet abartulritnww com 
Becky Bogart, Account ExecutivB 
1949) 25O-3O0£vFAX 13491 833-2857 

i^HI SOUTHEAST mmggggg^ 

Don Sea,-. Senior District Manager 
Internet- dseayOnww com 
Terry Sanders-Prentice. Sales Assistant 
(770) 394 0756/FAX: 1770)394 6354 
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DIRECT RESPONSE ADVERTISING 
Response Card Decks/Markelplace 

Ktm Norton. Director of Direct Response 
Richard Black. Sr. Account Manager 
Enku Gubaiit, Account Manager 
Sean Weglage. Account Manager 
Kathryn Zinn. Account Manager 
Internet: knorton. rUack. egubaie. sweglage. kiinu-eCnww cam 
Sharon Chin. Sales/Marketing Operations Manager 
Chris Gibney. Sales Assistant 
(5081 875-6400YFAX: 1508) 628-3976 

RECRUITMENT ADVERTISING 

Dodi RaomoviU. Senior Recruitment Director 
Carta Cappucci. Marketing/Sales Coordinator 
Sandy Weill, Account Executive 
Kanma Zannotti. Account Executive 
Internet drabmov. ccapp, sweill, k^annon'Srovw com 
(5081 875-6401VFAX (5061 820-0607 
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News 



HP snubs EMC with new network storage plan 



BY DENI CONNOR 

NEW YORK — Hewlett-Packard last 
week introduced a comprehensive — 
and controversial — storage-area net- 
work strategy that pits the company 
against longtime storage partner 
EMC. 

The strategy, dubbed the HP 
Equation, is comprehensive in that it 
includes a multitcrabytc-disk subsys- 
tem, a Fibre Channel switch and 
storage management software for 
mainframe, Windows NT and Unix 
servers. 

The strategy is controversial in that 
HP's new high-end disk array, the 
SureStore E Disk Array MC256. will be 
sold by HP under an OEM arrange- 
ment with Hitachi Data Systems, a 
chief rival of EMC. HP has been a 
major EMC reseller, with sales of 
EMC's Symmetrix products through 
HP accounting for about one-fifth of 
EMC revenue last year. 

HP explained its shift away from 
EMC by saying EMC's products 
weren't open enough to meet cus- 
tomer requirements. However, 
observers critical of HP's partnering 
with Hitachi say that the MC256 is 
basically a knockoff of EMC's technol- 
ogy and is just as proprietary. 

For its part, EMC issued a statement 
suggesting that the company will bat- 
tle aggressively to win business in HP 
accounts. 

Will still sell EMC gear 

HP will continue to sell Symmetrix 
storage products if customers want 
them, but the company will focus 
on developing a top-to-bottom 
product offering that includes tech- 
nology from HP, Hitachi and other 
companies. 

HP will sell the Hitachi disk subsys- 
tem, which can hold up to 9 terabytes 
of data and supports data mirroring, 
for $250,000 and up. HP's new stor- 
age product collection also includes a 
16-port switch, dubbed the SureStore 
E Switch F16, which is made by 
McData. HP also introduced SureStore 
E Storage Node Manager, software 
that customers can use to discover, 
map and monitor storage devices 
across a network. 

While analysts. EMC and HP predict 
a battle for storage customers, users 
interviewed last week didn't seem 
fazed by the HP-EMC breakup. 

"It doesn't really matter who I 
get storage from," says Ken Johnson, 
chief information officer for Pepsi- 
Cola Bottling Group. "I didn't buy 
EMC because of HP. I bought 
EMC because of the technology they 
had to offer. 



"I don't see anything stopping me 
from introducing another vendor, 
such as HP or Hitachi, into my envi- 
ronment," he says. "I'd be foolish not 



to want to learn about it." 

In other HP storage news last 
week, the company announced the 
acquisition of Transoft Networks, a 



60-employee firm in Santa Barbara, 
Calif., that makes storage manage- 
ment products for Unix and NT 
networks. 

HP plans to integrate Transoft's 
technology with HP's Storage Node- 
Manager. A 
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STATE OF THE WAN: 
Maximizing the Potential of 
Frame Relay ATM and 
Emerging Network Services 

LEARN FROM THE LEADER 

The era of expensive, inflexible leased-line networks is 
over! So what 's your next move? Public Frame Relay' 
ATM In the backbone? TCP/IP everywhere? 

To ensure your WAN is well positioned for the future, 
join John Gallant. Editor in Chief of Network World, 
Dr. Jim Metzler and Debra Mielke. two leading industry 
analysts of The Metzler Group and Associates, and 
representatives from the leading WAN vendors for State 
of the WANi Maximizing the Potential of Frame 
Relay. ATM and Emerging Network Services 
Together, tn this unique, interactive Town Meeting event, 
they confront the issues surrounding the ever-expanding 
areas of WAN technology and network services. 

You will leave this seminar with the information you need to 
build, buy and manage the high speed, reliable 
infrastructure your business 
applications demand: Intranets. 
Extranets. 

E-commerce and more 



Attend this FRtE SfcMINAK and get the answers to 
your most pressing WAN management questions: 

• Compare and contrast the benefits of ATM. 
Frame Relay and other emerging Wide Area 
Networking technologies and services 

• Learn to lower the cost of operations and support 
by effectively placing your voice traffic over data 
transmission services 

• Understand Quality of Service (QoS) and the 
requirements for providing end-to-end QoS 
including equipment, reporting and staffing 

• Probe vendor executives on plans for product 
rollouts, features sets and product support 
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John Gallant. Editor In Chief, Network World 

Or. Jim Metzler and Debra Mielke 

The Metzler Group and Associates 
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ION, 

continued from page 1 

is unavailable to customers 
who want to use the network 
for voice, video and data — 
the way the service was adver- 
tised 

According to Sprint's brand- 
new tariff for ION — an inte- 
grated-access service employ- 
ing an ATM premise device to 
concentrate all traffic types 
over broadband links — users 
can buy service at a rate of 45 
cents, 67 cents or $1.34 per 
megacell. or one million ATM 
cells. Network World obtained 
the tariff last week after Sprint 
quietly filed it with the Federal 
Communications Commission. 

The highest usage rate 
applies to circuits carrying traf- 
fic that cannot bear any delay. 
The middle rate applies to tra- 
ditional LAN interconnection 
traffic, and the low rate applies 
to low-priority store-and-for- 
ward applications. 

The problem? Sprint reveals 
in the tariff that it cannot yet 
bill for ION voice and video 
traffic based on usage. Net- 
work professionals who want 
to put both voice and data 
traffic on the network must 
choose a second billing 
option: circuits with tradition- 



al monthly flat fees. 

At T-l speeds, the flat-rate 
circuit price is $3,429 per 
month for the highest service 
level, equivalent to ATM's con- 
stant bit rate (CBR) class of ser- 
vice. The price for the middle 
option — equivalent to ATM s 
variable bit rate (VBR) non- 



real-time class of service — is 
$1,715 per month. Overall, 
flat-rate billing is available at 
numerous speeds ranging 
from 64K bit/sec to T-3, with 
prices varying accordingly 
(see graphic). 



ION'S complicated dual- 
price structure presents 
some dilemmas for users, 
according to analysts who 
also got their hands on the 
tariff as it was filed. 

For those who can use 
them, the usage-based fees are 
quite attractive compared 



with fees for traditional carrier 
services, says Lisa Pierce, a tele- 
com analyst at Giga Infor- 
mation Group. Some usage- 
based frame relay offers from 
carriers such as MCI World- 
Com and Qwest are priced at 



up to 5 cents per megabyte. 
But because the ATM-based 
Sprint ION service is priced 
per megacell, and a cell con- 
tains 53 bytes of information, 
even the highest ION usage 
rate ($1.34) gives you more 
bang for the buck than frame 
relay usage plans, even after 



allowing for ATM s relatively- 
high overhead. 

"The usage option is clearly 
a better buy unless you hap- 
pen to be an incredibly high- 
volume user, which is unlikely 
at this point," Pierce says. 



A Sprint spokesman says 
many users so for have actually 
said they prefer flat-rate billing 
because it is simpler and more 
predictable. But for those who 
do choose flat-rate billing, 
another potential problem aris- 
es: Sprint has left out an expect- 
ed service class between the 
high option (called Service 
Level 1) and the middle option 
(called Service Level 3). 

The missing class, which the 
ION tariff says would be called 
Service Level 2 if it were avail- 
able, is equivalent to ATM s 
VBR real time. It's designed for 
robust data applications thai 
tolerate little latency. 

Users who want that kind of 
circuit — say, for enterprise 
resource planning applica- 
tions — may have little choice 
but to go to Service Level 1. 
And those rates appear to be 
priced above most carriers' 
frame relay port prices for 
equivalent speeds, though 
Pierce says they beat AT&T's 
prices for CBR ATM. 

Research Assistant Deidre 
Massenberg contributed to 
this story. 

Get more info online. 

I OeoFlmlT: 8M43 I 
vuww.nwfusion com 



Get out your calculator 



Between any two corporate sites. Sprint ION charges a 
monthly site-to-site transport charge that varies depending 
on the class of service and the amount of reserved bandwidth: 



Line 
speed 


Service 
Level 1 


Service 
Level 2 


Service 
Level 3 


Service 
Level 4 


64K 


$143 


n/a 


$34 


$38 


128K 


$286 


n/a 


S'79 


$39 


2b6K 


$572 


n/a 


$286 


$39 


T-1 


$3,429 


n/a 


$1,715 


$89 


T-3 


$64,296 


n/a 


$32,148 


$2,304 



Notes: 

1. Service Level 2 is not yet available. Users needing that class of service for data 
Level 1 

2. Listed prices require a two-year term commitment. Three-Year contracts will be 
charges apply for access lines. 



.... . L 

Equivalent to ATM constant bit rate (voice 
and video) 

Service Laval 2 

Equivalent to ATM variable bit rate (VBR) 
real-time traffic (delay-sensitive data 
applications] 

Service Laval 3 

Equivalent to ATM VBR non-real-time traffic 
(LAN interconnection) 

Service Level 4 

Equivalent to ATM unspecif iced bit rate 
(low-priority store-and-forward traffic) 

applications may have to begin with Service 
available al slightly lower prices Additional 



Copper, 

continued from page 1 

installed in enterprises. Some 
observers say copper versions 



of Gigabit Ethernet products 
could cost up to 50% less than 
fiber ones. 

It will be easier to extend 
Gigabit Ethernet across more 
servers once a copper version 
of the technology is 
available, says Kurtis 
Lindemann, network 
specialist at Ohio State 
University's college of 
business, which already 
uses Gigabit Ethernet 
over fiber. 

In a couple of years, a 
copper version aLso may 
open the door for Giga- 
bit Ethernet to the desk- 
top, he adds. 

But developing the 
physical layer (PHY) 
interface for the cop- 
per version has been 
difficult, leading to 
numerous delays and 



false starts from PHY chip 
manufacturers, according to 
gigabit equipment vendors. 

One of the most prominent 
chip makers, Broadcom, sup- 



plies Alteon, 3Com. Cisco, 
Nortel Networks and others. 

Last August, Broadcom an- 
nounced it would have copper 
Gigabit Ethernet prototypes 
ready at the end of 1998. 



But the company is still 
working out the kinks and is 
expected to make an announce- 
ment about it this week 
Broadcom is trying to get chips 
to equipment vendors this 
month, industry sources say. 

I.ast week, Broadcom rival 
SEEQ Technologies also 
revealed it will have sample 
PHY chips ready this summer, 
with volume shipments in 
the fall. 

Switches and NICs built on 
the new PHY chips are 



expected to ship soon after 
equipment vendors receive 
the chips. "Our boards are 
totally ready," says Drusie 
Demopoulos, vice president 
of marketing at Foundry 
Networks. Demopoulos says it 
will take about a month of 
tests after getting the chips 
before Foundry can offer com- 
mercial products. 

Similarly, Alteon has had its 
NICs ready since last October's 
Interop and is just waiting for 
PHY chips. 

Extreme Networks 
hopes to demonstrate 
lOOOBase-T on its 
BlackDiamond switch 
this week. 

Much unresolved 

Despite the antici- 
pated payoff of Cat- 
egory 5 equipment, 
vendors agree that ini- 
tial 10(X)Basc-T prod- 
ucts won't be much 
cheaper than their 
fiber counterparts — 
at least, not initially. 

As copper prices 
fall, fiber Gigabit 
Ethernet product 



prices will be forced down as 
weU. 

The price difference will 
be an important factor in 
users' decisions. "If the price 
is close, you might as well go 
with fiber," Ohio State's 
Lindemann says. 

Copper-based Gigabit Ether- 
net technology also faces a 
challenge in that it is unproven 
in real-world environments. "I 
would be concerned about 
the reliability and pcrfor 
mance of Gigabit Ethernet 
over copper," says Mike 
Ackcrmann, manager of net- 
work planning and design at 
Blue Cross/Blue Shield of 
Michigan in Detroit. 

Another consideration is 
that the distance of the 
copper version is limited to 
100 meters, while fiber 
Gigabit Ethernet can stretch 
for kilometers (see story. 
page 36). 

On the standards side, 
lOOOBase-T is due to be ratified 
by the IEEE in September. A 

Get more Info online. 

I Oo«Hnder 8830 I 
w vi/bv nwfi/sion com 



Bringing up Gigabit 

Gigabit Ethernet has been working its way through the IEEE for several years: 

March 1996 

Project 
authorized 
for Gigabit 
Ethernet 
over fiber. 




March 1999 

Original IEEE target 
date for copper-based 
standard ratification 
slips to September 

«MEEE 



May 1999 I 

Broadcom demonstrates 
working copper-based chips. 
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News 



V-ONE breaks through encryption export barrier 




V-ONE's Dawson: His 
company devised a 
security scheme that 
pleased everyone. 



BY ELLEN MESSMER 

GERMANTOWN, MD. — A small 
security vendor. V-ONE Corp.. broke 
through the U.S. government's en- 
cryption export barrier, receiving 
Commerce Department approval to 
ship its virtual private network gear 
(VPN) almost anywhere in the world. 

Companies will be able to use 
V-ONE's SmartGatc VPN. which uses 
strong Triple-Data Encryption Stan- 
dard (DES) encryption, in aboul 
140 countries without having to go 
through a case-by-case approval 
process. 

V-ONE cut through the red tape 
because its SmartGate VPN for enter- 
prise applica- 
tion encryp- 
tion uses a 
trusted first- 
party key-re- 
covery meth- 
od that the 
FBI and Na- 
tional Secur- 
ity Agency 
(NSA) ap- 
proved after 
more than a 
year of evalua- 
tion. 

V-ONE re- 
ceived approval by providing a way 
for companies using SmartGatc to 
decrypt data at the request of law 
enforcement — without the encryp- 
tion user surrendering his private key. 
Analysts predict the rest of the securi- 
ty industry will have to heed the reg- 
ulatory victory. 

"Other vendors are going to have to 
follow suit here to get the same type 
of approval in order to remain com- 
petitive," says Jeffrey Johnson, presi- 
dent and CEO of Meta Security Group 
in Alpharetta, Ga. "The vendors are 
tired of being limited by these gov- 
ernment rules." 

And so, of course, are users. 
Government encryption regulations 
have often hindered corporations 
from using the same products interna- 
tionally that they use at home, which 
jeopardizes network security and con- 
founds interoperability. 

How did V-ONE gel this unprece- 
dented break from the Department of 
Commerce? The SmartGatc client/ 
server-based VPN has a feature called 
KRAKit, which allows designated cor- 
porate employees to decrypt applica- 
tion data encrypted with SmartGate. 

This differs from the trusted third- 
party approach pushed by the FBI and 
NSA, which would require a corpora- 
tion to escrow encryption keys with 
an outsider. 

"We looked at the regulations, and 



met with the Bureau of Export 
Controls and the FBI repeatedly." says 
Dave Dawson, V-ONE'S CF.O.-We came 
up with what we call the trusted first- 



party mechanism, whereby a company 
can recover' its own keys, should law- 
enforcement require access to data." 
With the Commerce Department's 



approval. V-ONE becomes the only 
security vendor wiihTriplc-DL\N encryp- 
tion, which can be easily exported to 
most countries h\ any n ix- of organiza- 
tion — not just banking, insurance or 
others thai have special privileges 
under the export rules. 3 
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Cabletron, 

continued from page 1 

help users prioritize traffic- based on the 
particular application so they can allo- 
cate bandwidth accordingly. 

This Layer 4 QoS and security feature 
is also important for users looking to run 



voice and video over their data nets 
because those applications require more 
bandwidth and less network delay. 

"One of the things we want to do is 
begin to shove some video across our 
network," says Craig Timmons, director 
of university computing at the Univer- 
sity of Charleston in Charleston, W.Y 



"Layer 4 will help with that and with 
securing IP addresses." 

The firmware upgrade to Cabletron s 
SmartSwitch 2000. 6000 and 9000 will 
allow users to download Layer 4 QoS 
and security software into flash memory 
on those switches. The software will 
enable the switches to classify, prioritize 



and filter traffic by reading the TCP and 
User Datagram Protocol (UDP) port 
numbers of the applications running on 
the network. 

TCP/IP-based applications are as- 
signed TCP and UDP port, or socket, 
numbers that identify the application for 
host-to-host connections. 

Once this information is known, the 
switches can apply one of several classi- 
fication and queuing standards in the 
switches — 802. lp. Differentiated 
Services, weighted fair queuing and 
class-based queuing, to name a tew — to 
prioritize the traffic based on urgency or 
bandwidth needs. 

Timmons was pleased that the Layer 4 
QoS and security enhancement is a 
firmware upgrade:"I just download the 

1 NETm*RLPHNTEROP99l 

code on the switches and away I go." But 
Timmons cautioned that he has not yet 
received the upgrade, so he does not 
know if it works as advertised. 

To enhance the new Layer 4 QoS fea- 
tures, Cabletron will also unveil switch- 
ing modules for its high-end Smart- 
Switch 9000 that double the switch's 
current port density and increase per- 
formance fivefold. 

Ihe new modules allow for up to 336 
10/100M bit/sec ports or 56 Gigabit 
Ethernet ports in a single chassis. Per- 
formance now scales to more than 35 
million packet/sec and 45G bit/sec of 
bandwidth, Cabletron says. 

There are six new modules for the 
SmartSwitch 9000. including two 16-port 
10/100M bit/sec Ethernet boards, one 
with an ATM or FDDI uplink, and the 
other with dual Gigabit Ethernet ports. 

The new modules also include three 
24-port 10/100 boards: one with copper 
interfaces, the others with either single- 
mode or multimode fiber interfaces. The 
last new module is a four-port Gigabit 
Ethernet card. 

For interconnecting the high-perfor- 
mance, QoS-enabled workgroups, Cable- 
tron will roll out the SmartSwitch Router 

2 lOO.This new router sports eight fixed- 
configuration Gigabit Ethernet ports for 
dedicated server farm connectivity. 

The SmartSwitch 2 100 is intended to 
go up against Nortel Networks' Accelar 
1000 and Foundry Network's Turbolron 
Layer 3 switches, and Extreme Net- 
works' fixed-configuration Gigabit Ether- 
net offerings. 

The SmartSwitch Router 2100 is 
priced at $1,250 per port. It will ship in 
June. The new modules for the Smart- 
Switch 9000 cost from $7,200 to 
$21,000 and will ship in August. The 
Layer 4 QoS and security firmware up- 
grade costs $250 and is available now. 

Cabletron: (603) 332-9400 

Get more information online. DocFinder: 2839 
nwfusion 
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News 



What's Cisco's WAN strategy? It's anyone's guess 



Observers say Cisco s WAN switching strategy hasn t jelled three years after StrataCom buyout. 



BY JIM D II V F Y 

SAN JOSE — Now that 
Cisco has killed off its ATM 
switch for the core of enter- 
prise and service provider 
networks, the company's 
plans for the wide-area mar- 
ket are unclear. 

Cisco is banking on in- 
creased sales of WAN switch- 
ing gear to enterprises and 
service providers to drive the 
company's growth. But last 
week's news that Cisco dis- 
continued development of its 
core WAN switch and delayed 
another enterprise switch for 
a year indicates that success 
for Cisco in this market may 
be more challenging than 
expected (NW, May 3. page 1). 

Analysts, competitors and 
other Cisco watchers say the 
company's long-term WAN 
switching strategy for enter- 
prises and service providers 
still hasn't jelled three years 
after Cisco's $ i billion acqui- 
sition of StrataCom. They say 
Cisco has shipped only one 
new WAN switching platform 
— the MGX 8850 IP/ATM 
edge switch — since the com- 
pany acquired StrataCom. And 
that offering is available in 
limited volume. 

Others products are merely 
upgrades of existing Strata- 
Corn architectures. And Cisco 
has lost market share in frame 
relay WAN switching since- 
acquiring StrataCom, according 
to Vertical Systems Group of 
Dedham, Mass. (see graphic). 

"In frame switching Cisco 



has decreased because 
[Ascend's Cascade switches] 
got developed and rolled out," 
says Rosemary Cochran, prin- 
cipal analyst at Vertical 
Systems Group. 

Cisco rebuffed repeated 
requests from Network World 
last week for interviews with 
company executives on the 
state of its WAN switching 
business. Cisco did, however, 
respond to queries from other 
publications regarding 
this topic as those pub- 
lications contacted 
Network World for 
commentary. 

The death of the 
20G bit/sec TGX 8750 
seems to leave Cisco 
without a core IP/ATM 
WAN switch to chal- 
lenge offerings from 
Ascend, Newbridge 
Networks and Nortel 
Networks, and with a 
gaping hole in its "end- 
to-end" voice/data sys- 
tem story. From a 
short-term revenue- 
standpoint, that may 
not be disastrous be- 
cause Cisco has said in 
the past that the revenue 
potential at the edge of the 
network is 15 times that of 
the core. 

But longer term, a lack of 
presence in the core may 
mean a lack of account con- 
trol and the incremental rev- 
enue increases that control 
provides. 

In any event, the TGX 8750 
was supposed to serve as 



proof of the synergy between 
Cisco and StrataCom — that 
IP from Cisco could be "mar- 
ried" to ATM from StrataCom 
to provide the best of packet 
and cell switching for enter- 
prises and service providers. 

Cisco now says its MGX 
8850 edge switch, which 
scales from 1.2G bit/sec to 
45G bit/sec, can slide into the 
core. Indeed, Cisco customer 
Sprint always intended to use 



several Cisco rivals have 
equity stakes in Juniper and 
Nortel owns 20% of Avici. 

But acquiring a router start- 
up at this stage would be a 
humbling experience for 
Cisco, observers say. That 
move would signal that the $4 
billion StrataCom acquisition 
did not pan out, and that 
Cisco, the worldwide leader 
in routers, did not have the 
wherewithal to develop a 



No growth 

Cisco's share of the frame relay equipment market has decreased since 
acquiring StrataCom in 1996. 

Cisco's share of the worldwide frame relay equipment market (carrier, enterprise and ISP): 

j^^^ ^^^^ ^^^^ 



1996 



Total market: $1 billion 



1997 



Total market. Si .6 billion Total market: $1.9 billion 
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the MGX 8850 as its core 
switch for its Integrated On- 
Demand Network, a Sprint 
spokesman says. 

But it is still unclear 
whether the MGX 8850 is a 
tactical or strategic platform 
for the core. 

Cisco competitors say at 
1.2G bit/sec, the MGX 8850 
currently lacks the horse- 
power for edge duty, let alone 
core. They say that by the 
time the MGX 8850 scales to 
45G bit/sec — which they 
believe to be mid-2000 — the 
switch will have already been 
surpassed by other products. 

Cisco's strategic IP/ATM 
switch for the WAN core, com- 
petitors say. is a 120G to 190G 
bit/sec platform under devel- 
opment, code-named Jupiter. 
They expect Jupiter to ship in 
late 2000. 

There's also always the 
possibility that Cisco could 
acquire its way back into the 
WAN core by snapping up 
one of the gigabit/terabit 
router start-ups. Juniper 
Networks and Avici Systems 
may be off-limits, given that 



high-speed switching router 
for the WAN core — that mar- 
ries IP and A TM — in a timely 
fashion. 

Whether Cisco acquires a 
company or Jupiter emerges, 
analysts say Cisco to date has 
been sending mixed messages 
regarding its strategic tech- 
nology for the WAN core: IP 
packets or ATM cells. Though 
Cisco claims to be "technolo- 
gy agnostic" — having no 
preference of one over anoth- 
er as long as it offers what the 
customer wants — the com- 
pany has actually been down- 
playing the significance of 
ATM in next-generation data 
optimized networks. 

"Without a core switch, 
Cisco is going to continue to 
try and marginalize ATM, 
except at the edge," says Craig 
Johnson of The PITA Group in 
Portland, Ore. "It's to the com- 
pany's advantage to do such a 
thing and say that routers arc- 
where the intelligence is." 

"Cisco is still schizophrenic 
with regard to ATM and rout- 
ing," says Tom Nolle, president 
of consultancy CIMI Corp. in 



Voorhees, N.J. "The strategies 
that it's talking about are not 
consistent with its product 
positions. The service pro- 
viders are suspicious of peo- 
ple who they think are maybe 
talking out of both sides of 
their mouths." 

Indeed, Cisco is stating 
three reasons for killing the 
TGX 8750, one of which is 
slow demand for OC--18 ATM 
in the WAN core, an assertion 
Cisco competitors and ana- 
lysts say is ridiculous. 

"I don't agree with that." 
Vertical's Cochran says. "Cer- 
tainly demand hasn't de- 
creased from a year ago; if 
anything, it's increased." 

Cisco has underscored the 
OC-48 packet-over-SONET 
features of its 12000 GSR 
router as key to the product's 
selection by service providers 
Frontier, France Telecom, IXC, 
Swisscom and Enron. 

Another reason Cisco gave 
for discontinuing the TGX 
8750 is that the company 
could not build a single prod- 
uct at prices that enterprise 
network customers and ser- 
vice providers expect. 

Cisco's third reason, ac- 
cording to sources, is that the 
20G bit/sec TGX 8750 no 
longer makes sense for the 
core when the MGX 8850 
scales to 45G bit/sec. 

Observers say Cisco's 
explanations for the demise 
of its core IP/ATM switch 
indicate that the company's 
WAN switching strategy is 
just as scattershot — even 
three years after the Strata- 
Corn acquisition. This, along 
with the release of only one 
new WAN platform in three 
years and the loss of frame 
relay market share, signals 
that Cisco has so far benefit- 
ed little from StrataCom, and 
vice versa. 

The only apparent gain 
from StrataCom is that Cisco 
bought its way into the AT&T 
and WorldCom public frame 
relay networks. 

"They've renamed a bunch 
of products, but I haven't 
seen much more than that," 
says Bob Bellman, president 
of BrookTrail Research in 
Natick, Mass. "Nothing excit- 
ing, anyway." B 
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olutions for networking voice & data around the world. 




Service providers and systems 
integrators need data and voice solutions 
that will meet their global networking needs. 
Whether it's connecting networks in the U.S. 
with those worldwide or designing and 
building networks for specific applications 
around the globe, RAD Data Communications 
has the systems, expertise, and fifteen years 
ofexperience to meet their demands. 

RAD's product lines include conversion 
products like T1 to E1 and E1 to T1 
converters and other products that allow you 
;to run E1 over T1 lines in the U.S., T1 over 
the E1 networks in ROW, and E1/R2MFC to 
DTMF signaling conversion for telephony 
applications. 

Other product lines include E1-DSU/ 
CSU, E1-HDSL modems, E1, E2 & E3 multi- 
plexers for voice, data and Ethernet over 
copper and fiber. E1 digital cross-connects 
and N*E1 inverse multiplexers. 

A titan among U.S. interexchange 
carriers is utilizing RAD's inverse multiplex- 
ers as the basis for their E1 service in the 
U.S. And one of the largest international sys- 
tems integrators is using RAD's multiplexers 
for command and control systems in 
Asia. What's more, RAD's DXC-30 is a 
5=* very popular solution for T1/E1 conver- 
sion. Why not contact RAD today and 
find out how we can help you with your 
global networking needs. 
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Boiling frogs and boiler rooms 




MARK 
GIBBS 



am told that boiling a frog is 
easy. You put the hapless 
amphibian in a pot of cold water 
and heat the pot slowly The 
frog, being coldblooded, has no 
reference for what its body tem- 
perature should be and heats up 
along with the water until it is 
boiled. 

Before you assume that I've 
changed my dietary habits, 
please note that I am not offer- 
ing this as a recipe, but rather as 
an analogy tor what is happen- 
ing to many IT organizations. 

The culprits are, of course, 
the Internet and electronic com- 
merce. We're all getting heated 
up by online business, and if 
we're not careful, before we 
know it many of us will be 
killed off — boiled — because 
we're not adapting 
well to the changing 
environment. 

History is behind 
the problem. IT start- 
ed out as a cutting- 
edge service and 
grew to become the 
infrastructure that 
makes modern busi- 
ness possible. In 
short, you IT chaps 
are superstars! At 
least you should be 
superstars. 
Unfortunately, many of you have 
been reduced to running the 
"plant." A hugely important plant, 
but a plant nonetheless. 

The plant is something we 
associate with, for example, the 
boiler room. In the boiler room 
people are doing mysterious 
things with furnaces, pipes, 
gauges and valves. Hut who 
thinks about his company's boil- 
er room? It has become forgot- 
ten infrastructure. 

Could networks become for- 
gotten infrastructure? Sure, if 
you let them. 

If, for example, you let the 
job drive you instead of vice 
versa, all the skill will drain 
away. I've talked to many IT pro- 
fessionals who complain that 
the volume of work means that 
their jobs are to run around fire- 
fighting — they are operating 
tactically. 

Now that's not to say tactical 
tasks are wrong or can be avoid- 



ed. Indeed, it isn't possible to 
run a service of any kind with- 
out some form of ad-hoc mainte- 
nance — something that is 
essentially tactical — being 
required. But when the majority 
of your work becomes tactical, 
it is the beginning of the end. 

If you are so busy with minu- 
tiae that you loose sight of the 
big picture, your role in the 
organization will change. Good- 
bye forever to superstar status. 

This is the being boiled alive 
that I'm talking about. When 
you're tactically driven, you 
don't notice that your goose 
(or frog) is in the process of 
being cooked. 

We'd like to think that IT is 
involved in the strategic area 
of business process improve- 
ment, but translating existing 
business practices into comput- 
erized processes is not a strate- 
gic role. You can see this kind of 
mistake on the Internet. Many 
Web sites fail to improve on the 
way business is done — they 
merely replicate existing busi- 
ness methodologies online. 

For example, I was trying to 
order a product from a Web site 
the other day. and the vendor's 
strategy for providing service 
was to display the order form 
on a Web page and tell me to 
print it and fill it in on paper. 
The form was badly laid out and 
complex, and it wasn't obvious 
how shipping charges would be 
applied 

Here's where IT should have 
grabbed the frog, er, bull by the 
horns. IT should have seen the 
opportunity to improve how 
things were done and provided 
an interactive process that pro- 
duced a complete, correct form. 
Hell, a machine-readable form 
would be easy to create. But I 
bet the IT folks were more 
occupied with tactical stuff. 

The only group that can make 
your company successful is your 
group — the IT group. 

But if you are obsessed with 
running the plant, you are not 
involved with strategic issues. 
And you run a very big risk of 
being boiled. 

Feeling hot? Frog recipes to 
nwcolumn @g ibbs. com. 
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The increasingly giddy legions of 
Linux devotees received a love letter last 
week from those sweet-talkers at Kleiner 
Perkins Caufield & Byers. 

The Kleiner Perkins missive was actually 
addressed to Linuxcare, Inc., a San 
Francisco start-up, in the form of an undis- 
closed sum of first-round venture capital 
This kiss is more than just a kiss for 
Linuxcare, however, in that it also shows the 
smart money has fallen hard for the darling 
of the open source software movement. 

Linuxcare, as the name suggests, sells 
technical support for various strains of the 

Linux operating system being hawked by the likes of Red Hat. Caldera, 
Pacific HiTech and SuSE. Corporate IT types often call the lack of such 
support reason enough to steer clear of Linux. 

There's a very good business to be made supporting all flavors of 
Linux all over the world," says Ted Schlein, the Kleiner Perkins general 
partner who sits on Linuxcare's board. "The funding is a statement 
about Linux, but it's also a statement about open source." 

How enamored of Linuxcare is Kleiner Perkins? 

Well, the entire courtship — - from first pitch to funding commitment 
— "took only six weeks," says Art Tyde, a Linuxcare founder. 

Life is a bed of roses for everyone and everything Linux these days. 
So being a journalist and hating good news by nature. I had to ask 
Tyde where he fears the thorns lurk. 

"There's this sleeping behemoth out there," he says. "I don't think 
Microsoft has really started to fight back." 

As of these keystrokes. Jeff Papows remains CEO at Lotus. 
This is true despite a full week's worth of giggling inside and outside 
the company over a painfully embarrassing Wall Street Journal article 
that painted Papows as a serial fibber on details about his military, 
educational and family backgrounds. 

While some insiders say privately he's toast, Lotus officialdom con- 
tinues to insist that the story is much ado about nothing. Parent com- 
pany IBM has said nothing at all. 

Prediction: They're stalling. A CEO other than Papows will welcome 
the faithful at next January's Lotusphere. 

Of course, you might want to keep in mind that this prediction 
comes from a guy who would have bet his last nickel that no president 
could survive a sex scandal involving an intern. 

Remember all the hoopla two weeks ago about those 16 IT 
professionals who were auctioning their services to the highest bidder 
on eBay? Here's a new twist. 

Monster.com, the King Kong of online |ob sites, will launch Monster 
Talent Market on July 4. The idea is to let companies bid on the ser- 
vices of independent contractors, consultants and freelancers. 

Check out http://talentmarket.monster.com for a preview. 

What follows are all 122 words of an actual first sentence of an 
actual press release, obviously written in the author's native gibberish: 

"Hummingbird Communications, Ltd. (NASDAQ: "HUMC" and TSE: 
"HUM"! and PC DOCS Group International, Inc. (TSE: "DXX" and NAS- 
DAQ: "DOCS") today announced that they have agreed to amend the 
arrangement agreement dated March 4, 1999, (providing for the acqui- 
sition by Hummingbird of PC DOCS Group by way of a Plan of 
Arrangement on the basis of one-third of a share of Hummingbird for 
each share of PC DOCS Group) by extending the period under the 
arrangement agreement, in which each of Hummingbird and PC DOCS 
Group is to respond to the announcement on April 29, 1999, by Open 
Text Corporation, that it will offer to acquire, at a price of $8.50 cash 
per share, 100% of the common shares of PC DOCS Group." 

Got that? 

McSanutrii welcomes etvti rerbose Internet news tips nl 
dott) 8jo-~4"i or pmcnamariafbnww.com. 
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Give your world a big push with a simpler, more scalable network for 
the new enterprise. Ye're talking about the Extreme Networks'" Summit'" 
and LlackDiamond'" Layer 3 switches. They combine Gigabit Ethernet, 
wire-speed performance and Policy-Lased Quality of Service to give 
new enterprise applications a well-deserved push. 

3o now, you can run everything from ERF to e-commerce, from voice- 
over-IP to co-located server traffic. ICo sweat. And because our switches 
share the same hardware, software and management architecture, they're 
easier to manage and can actually reduce your network ownership costs. 

i'or more information, call us or visit our web site. It could be just 
the push everybody in your company needs. 
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